whitelist certain http routes