AclHelper:: Check string url against whitelist

Closes #407