[mlarratt]

True, but it's not a bad idea to check for an @ in the string as a sanity check, in case the user has accidentally put their username/password/other in the field.