Add a whitelist for User attributes available to the API.