make login conditional on whitelist existence