backend - Extract statistics from return value

Also made sure companyAlias is removed from oauth config. That messes up
the request so better not include it.
backend - Add `/popular` resource
backend - Tidy up routes and API