allow for whitelist and authenticated-gets to be configured by end user
Merge pull request #57 from ryanramage/authenticated-gets

Authenticated gets