add whitlist route for authentification