added whitelisted urls to config