add bypass if wp login is hidden (wp-login.php?external=wordpress).