Add more rules to the login flow