Forces login for backend access in headless WordPress setups while allowing GraphQL/REST API endpoints and essential paths.