Handle allowed params and throw BadResponse if needs be