added fbcdn to whitelist