FIX Prevent DOS by checking for env and admin on ?flush=1 (#1692)
Merge pull request #2246 from hafriedlander/fix/flush_24

 FIX Prevent DOS by checking for env and admin on ?flush=1 (#1692) in 2.4
FIX: Have ParameterConfirmationToken includes work regardless of include path