Add isAuthenticated policy to StatController