Try harder to spot issues when dealing with email vs. preferred_username and trimming @domain.tld from them

Ensure that the OpenID-Connect IdP used for the test actually sets the preferred_username claim and add more variations in emails/usernames to catch as many issue as possible.