add update parameters whitelist so it can be extended at parent app level