moved ip whitelist to options