membership cvc token changed to `IS IN' to avoid conflict with IN used for let