fixed bad JPQL in auth holder cleanup class
simple cache for stats
updated stats service to have a resettable cache triggered by other service events