setting up whitelist