Consistently use WT_ROOT in the require/require_once statements

The recently introduced autoloader and password-compat library are called through a simple relative path, which is not consistent with the use of the WT_ROOT constant to include files in the rest of the application.