* New: two step login authentication with email
* Improvement: don't add rules to advanced-headers.php when empty
* Improvement: prevent duplicate headers in advanced-headers.php
* Improvement: Frame Ancestors default set to self
* Improvement: check if the Elementor function replace_urls function exists for compatibility with older versions
* Fix: wp-engine compatibility with database prefix change
* Fix: prefix replacement in wp-config too broad, causing issues if wp_ is used other then in the prefix.
* Fix: Update prefix site_id in user roles when changing the database prefix, to preserve capabilities for users in subsites
* Improvement: Use ABSPATH constant instead of path when writing path to debug.log
* Improvement: Pause CSP reporting after 20 requests, to lower server load
* Fix: script-src-elem in Content Security Policy not including source URL