removed wp-require-auth, using basic auth instead