tests + cvv checks