add a stats endpoint
oops, don't send bytes to the user