rename whitelist

`APPROVED_HEADERS`?