modified login confirmation to check for contains rather than ends with