Better differentiation between web-access and pure-transfer logs

Apache access logs are being decoded as PureFTP transfer logs because the first part of the log entries for each of these uses the same format. This change makes the prematch more specific.