Securing the wp-includes folder