add filter for allowed query parameters