added limit-login-attempts plugin to prevent brute force attacks on WP