added topcoat css and whitelist all domains in config