Try to clean up how duo_authenticate_user() interacts with wordpress interfaces

@akgood changes
added setting for disabling XML-RPC

This also fixes the warnings for multisite installs