Stable v2.9.4

• fix(wordpress): generate a random admin username for new installs
• feat(security): fail2ban jail for wp-login.php request floods
• feat(wordpress): rename default admin username + hide login URL via Toolkit