White black list

Naive shot at implementing #179 (https://github.com/jaliss/securesocial/issues/179).

Let me know if there is something fundamental that I have missed.

Thanks!

r/Steve