removed http_path from restricted parameters