I don’t get a redirect. I have to use the long one, e.g. example.com/wp-login.php?itsec-hb-token=wplogin for me to login.
Are there special assumptions or a context in which this redirect works?
Maybe update that settings page? It would still says example.com/wplogin, which is incorrect, right?
Shouldn’t it say: example.com/wp-login.php?itsec-hb-token=wplogin ?
