updated whitelist to allow any clients