allow for spaces and dashes in the card number in requests