* Feature: Prevent discovery of usernames through '?/author=N' scans. New option under login security which you can enable.
* Fix: Introduced new global hash whitelist on our servers that drastically reduces false positives in all scans especially theme and plugin scans.
* Fix: Fixed issue that corrupted .htaccess because stat cache would store file size and cause filesize() to report incorrect size when reading/writing .htaccess. 
* Fix: Fixed LiteSpeed issue where Falcon Engine would not serve cached pages under LiteSpeed and LiteSpeed warned about unknown server variable in .htaccess.
* Fix: Fixed issue where Wordfence Security Network won't block known bad IP after first login attempt if "Don't let WordPress reveal valid users in login errors" option is not enabled.
* Fix: Sites installed under a directory would sometimes see Falcon not serving cached docs.  
* Fix: If you are a premium customer and you have 2FA enabled and your key expires, fixed issue that may have caused you to get locked out.
* Improvement: If your Premium API key now expires, we simply downgrade you to free scanning and continue rather than disabling Wordfence.
* Improvement: Email warnings a few days before your Premium key expires so you have a chance to upgrade for uninterrupted service.




git-svn-id: https://plugins.svn.wordpress.org/wordfence/trunk@908283 b8457f37-d9ea-0310-8a92-e5e31aec5664