allow custom card token prefixes