limit patron-entered card number to 14 digits