fix cvc validation