Hey there! 

A status 400 error in the server log is a response status code that indicates that the server was unable to process the request sent by the client due to invalid syntax. 

In short, you don't need to type in the quote marks (") for the white list. 

For example --> localhost

Hope this helps! 

justin I had tried without quotes also and reconfirmed now as well. Still the same result. Also i am able to browse the apps and run the processes so server is responding for that. Just for api's its not responding.Can this happen?

For API IP whitelist, leave it blank. For API domain whitelist, just type in --> localhost Hope this helps.

justin I did the same but it worked by giving * in the domain list.For localhost it did not work. Added ss in below comment. Thank you so much for your time.

Same here. * worked, localhost didn't

Same here. Localhost didn't work. But when gave *, CSRF error stopped coming.