JC: added a call (user_access_finder in authentify) to pull records based on sql code entered for search/stats to block un-restricted search/stats which is a security breach.