add allow_user key-value in the magnet.conf, users who are allowed to retrieve statistic data are all defined in the magnet.conf