Bug that allows username and password to be equivalent

[neil (Neil Lalonde)]

This case is now handled. Names == password are being blocked now too.

https://github.com/discourse/discourse/commit/6f747c6b71c20e1eb22a82e023f3e37683637bfd