stats api authorization (bug 897528)