fix hit statistics and access() call before expire check