Fix token creation with null/blank CVC value.

Fixes a customer-reported issue related to token creation.

/cc @stephen
No — because I'm mutating cardParams inside the loop, I need to make a copy of the keySet first.