added limit-login-attempts plugin to prevent brute force attacks on WP
added disable-xmlrpc plugin
Merge branch 'hotfix/20131114'