remove access origin whitelisting