Fix token creation with null/blank CVC value.

Fixes a customer-reported issue related to token creation.

/cc @stephen
Would we ever have cases where these could be null? (i.e. we use `Integer`)