correct direct calls check, enqueue scripts and styles, and usage of plugins_url()