Add ABSPATH check in loader.php

Security fix to address:
https://github.com/cuny-academic-commons/commons-in-a-box/issues/72#issuecomment-18720546