Read allowed params from drop and check that each form field is contained

Support for nested hashes and arrays.