added whitelist to products controller