rename :allow to :allow_params, allow filtering GET, parse true/false