Authenticate request's params

- Added integration tests
Why is this not a class method but `remove_populated_preferences` is?