Use isAdmin check in regenerateStatsToken