OP adding WhitelistBuilder and SecurityConfig