also return card when just checking token