add sumlevs to api whitelist