put ben's whitelisting back in welcome controller