1)add bank_card cmd
2)add 401 callback
3)change SERVER URL from 'product' to 'dev',because something wrong in
'product'