Better liquid form errors

Read allowed params from drop and check that each form field is contained. Support for nested hashes and arrays.

@kaip @ccollins @mgbatchelor