wordpress rest api authentication without plugin