with default validator option `strict "remove" `, update params will be remove everything except `id`