Fix whitelist endpoint