Add endpoint for fetching activity stats

This is secured by a token that is only accessible by the admin, and is
regeneratable on the /stats page.
Change activityStatsTokens id's to have more entropy
Use isAdmin check in regenerateStatsToken
Merge pull request #125 from jparyani/stats

Add endpoint for fetching activity stats