It sounds like once the user gets the password correct, it doesn't matter what comes after it, maybe not only the last digit, possibly any other string of characters, or maybe they have to be added...