fix bug where the user could enter any names in the whitelist