**fix(auth): normalize ID casing on Windows to prevent duplicate entries due to case-insensitive paths**