Fix postback_url when using card_hash