secured api stats controller