allow overwrite params included in next query
also remove 'access_token' from black list