added basic user whitelisting support