I think he means doing it on the server, i.e. checking the password as-is, if that doesn't work, then check it with case inverted.