include can also be a hash to request nested associations.  This loops through and rejects any that are not allowed