Allow anyone to access the /api/stats call