Added whitelist to Application Controller