add fastapi_safe_fields and FastAPIInstance.safe_filter for security based on query parameters
fixing up safe_filter