One capital letter turns /pricing into a login form, and /Sitemap.xml into a 404

Every URL in PubTrivia's sitemap, re-requested with one letter capitalised, answers 307 to the login form. The exclusion list in the middleware matcher does not. Both behaviours are measured here, and the difference is which of the two comparisons is case-insensitive.