insert user to whitelist if they aren't there