Filtering a word in a URL

I have a policy to detect various forms of the words "Login", "Password", "User ID", etc., as well as a match with an exact data match to a list of user ID's.  I am having a numver of flase positives on various URLs that contain the word "login", such as "http://mycompany.com/login".  I want to create an exclusion of the incident if the URL contains the word "login".  I've tried various forms of wildcard, with and without leading/trailing slashes, but nothing seems to allow this to work.  Is this possible?