Hello!
Looks like `/etc/cron.hourly/01-awp_hourly` is some custom cron script doesn't provided by Plesk. Probably it affects to your problem. Can you provide the context of it?
Hi!
You use header X-Frame-Options with "ALLOW-FROM" option that is deprecated (more info here: X-Frame-Options - HTTP | MDN)
Try to use "Content-Security-Policy" header (Content-Security-Policy - HTTP | MDN)
Hello! You can setup global password policy in panel.ini:
[passwordManagement]
defaultPasswordStrength = Weak
strength policy has levels from VeryWeak to VeryStrong according to this article...