column names (data field) must be on whitelist

The column data fields which are used as column names in the application
will be checked against a column whitelist that can be specified in the
constructor.  If not specified all attribute/property names are valid!

It is good form to specify the whitelist, e.g. event.py
added column whitelist
added column whitelists to datatables views