location ~ ^/wp-json/wp/v2/users {
      deny all;
    }
      location ~ ^/wp-includes/wlwmanifest.xml {
      deny all;
    }
location = /xmlrpc.php {
    deny all;
}