test authorization of cards