Don't post card number or cvv to server

For (easier) PCI compliance, card numbers and cvv should not be posted to the server.
Changed the name field from the card number and cvv elements to be ids. Updated validator to instead check them by selector