Add whitelist routes