debug

* move private check to template_redirect to enable wp-login.php