ajax cleanup --whitelist works!