The !rt token is case-sensitive and often contains capitals, but the input CSS lowercased typed characters visually (misleading) and the placeholder "abcd" implied lowercase-only. Server-side validation and loginWithToken() already preserved case — only the UI was wrong. - Drop text-transform: lowercase from the input - Placeholder abcd -> aB3d