You would have to apply the server behavior 5 times since there is no way to group comparisons with OR currently.
Another option might be to save the 5 values in the session after login and then check those session variables on the various pages directly. That way it would let them log in without them set, but they still wouldn't be able to access the restricted content.