fixed #35: validation now rejects all SSNs starting with "9"
followup for #35: fixed tests (previously were treating invalid numbers as valid ones)