add localhost to whitelist