stats api authorization (bug 897528)
put global stats under stats:view (bug 897528)