Added missing authorization check in the authorization controller
Added statistics for admins