update to_json
add allowed fields