This can clearly be optimized. The rules that disallow "login_and_go" are already covered by the disallow rules for "login_". Checkmate.