whitelist domain with and without www.