added white list support to throttling (localhost is always allowed)