Use JSON.parse instead of evil eval, and handle the exception if not defined API_WHITELIST
Added paper_trail to save Withdraw audit trail