allowed query strings when clean urls are enabled