HCSVLAB-365: Fix token authentication whitelist logic