bugfix: whitelist_urls
adding INSTALL file