handle masked credit cards on update

This fixes #30 (cannot use masked card numbers) and #31 ('requird' :point_right: 'required').

In addition to fixing the above issues:

- I removed the unused `re` import here
- I corrected another typo `mechant_id` :point_right `merchant_id`