removes unusable variables; adds url and retailer to serializer and permitted params