Update WP Best Practices to include guidance on blocking /wp-json/wp/v2/users to anonymous users

Update WP Best Practices to include guidance on blocking /wp-json/wp/v2/users to anonymous users #1312