`wp-login.php` is under rate limit. Need to update the rate limiting in it and apply it to other endpoints like: `xmlrpc.php`, `wp-json`