You really used facebook as a best practices example? Where is the source code of facebook's function that deals with case insensitive passwords? How can you be

You really used facebook as a best practices example? Where is the source code of facebook's function that deals with case insensitive passwords? How can you be sure such source code is actually being used in production? It's as good as plaintext without any of those assurances...