scaffold white list
added authorization on white list
customize white list look
added white list constrain.