Permit certain request parameters by default