Surplus whitelist

Prior to calling the withdrawPOL() function, it is recommended to check if the token is part of the DAO approved whitelist