Added origin whitelist