- added stats access button in menu using hook
- fixed direct ajax call permission issue