Changed http status 401 to 403 for checkWhitelist