Better restore admin check on /stats route
Was deactivated for easier testing... and forgot to put it back :-/