fix updating cards, avoid location-redirect