i changed the comment on the whitelist test to indicate that it tests both success and failure