API: Add statistics to UserResource

Fix bug 2960
API: Add UserObjectsOnlyAuthorization

This will allow to forbid access to User resources that belong to other users

Fix bug 2958
UNDO    IGNORE THIS: misc comments