validation params filter, whitelist param keys