STATS Part 2.1

- Restrict access to /stats using AA admin user