changed POST whitelisting test