cors
cors checking
remove cor gem since not needed. fix card form to set flash_card param for all card types