Use localised whitelisting of attrs to fix updating charge_token