I've got the WhiteList plugin on my server right now because I've wiped and I'm waiting for the Rust update, but somehow two players joined. Is it not working anymore? 

No, it works fine still. Make sure you didn't grant any bypass permissions and aren't using any other plugins that manage connections on join.