remove hash rockets
allowed params need to include product properties