sort permitted_parames-monster-hash alphabetically
give permitted params some sane whitespace
whitelist params for custom_fields