authentication for get_stats