API Prevent DDOS by checking for env and admin on ?flush=1 (#1692)