Fix request white-list. closes #17