Fixed bug in UserAllowed() which resulted in 'CAN PICK STATS' being blank is there were no users in VALIDUSERS= from stats.conf