We now pass the userID to create_card function so looking it up in the database is now superfluous and has been removed