fixed off by one error on card numbers