Fixes for API whitelist authentication