added rest routes and whitelist