inverted the white and black list logic

white and black lists filter the attributes that assign_attributes
receives, instead of filtering what the serializable_hash returns