can now override the header returned and add whitelist option