card length check only looks for numbers, not all characters