add user whitelist, fixes issue #1