Added a comment in user controllers for whitelisting