Custom content types whitelest in the REST API

If active, custom content types should be available via the REST API. The following patch adds them to the whitelist when each CPT is active.
We indent with tabs, but align with spaces.  It looks like you're using tabs to align the latter part of this line, rather than spaces -- could you tidy that before I merge it in?