fixed regex to allow four digits

Adds support for Amex CVV that are four digits

Resolves #3526