Add false positives by making login request regex a bit more specific