allow plus sign in user's login attribute