add http whitelist handler