fixed regex to allow four digits

Adds support for Amex CVV that are four digits