added WP hardening

via .htaccess