Card resource should not be passed to the server: done client side