Whitelist values that will be accepted into the datastore.

This is a bit of a quick hack because I realized up until now we'd
accept anything that was passed in the post request in the datastore.
This isn't desired behavior. Heh.