add better GET response, variable visible fields
add check is allowed field
update allowed fields