Added whitelist for rack protection
added underscore for nice functional-type javascript
other small bug fixing