The stats access event listener will now authenticate HTTP HEAD as well. Fixes #249
Merge pull request #249 from christeredvartsen/issue-249

Stats access event listener only listens to HTTP GET