Don't allow the user to update internal data.

Don't allow to insert/update columns other then the one listed in user-visible-keys.
GET still returns internal columns like median, actual_annual, etc. since we use it to display data on web UI.
change user-visible-keys to user-editable-keys