allon anon user to view public stats (bug 985053)

This logic *should* work. Requires the API endpoint to allow either auth or no auth.