Whitelists now transient, setWhitelist deprecated

closes #12