Add option to define whitelist routes which can be accessed without
login
Implement endpoints to add purchases to a list
Fix typo
Made purchase list API action better
Merge branch 'dev'