set rate limiter whitelist for localhost for dev only