Add a list of whitelisted event ids, which the events API will now filter for.

i.e. The events API will now only return ids in the whitelist