added admin check for whitelist