Custom content types whitelest in the REST API

If active, custom content types should be available via the REST API. The following patch adds them to the whitelist when each CPT is active.