don't enable if whitelist and not authorized

This prevents just the cookie alone being enough to trigger profiling,
even if the profiling results cannot be viewed

closes #30
remove travis from todo as it is done
Merge pull request #38 from gregmolnar/readme

remove travis from todo as it is done
Merge pull request #31 from codekitchen/cookie_whitelist_enforcement

don't enable if whitelist and not authorized