If you need to support logging in via username and your usernames are case sensitive, use this.

user.rb

  def self.authenticate(email, password)
    user = find(:first, :conditions => ['LOWER(username) = ? OR email = ?', email.to_s.downcase, email.to_s.downcase])
    user && user.authenticated?(password) ? user : nil
  end