Hardening WordPress with htaccess