domain whitelist added to config