allow for only whitelisted pages to access the service