fix whitelist usage, include a default whitelist.txt