Add API to get credit cards for a specific user

So the only point in adding `can :display, CreditCard, user_id: user.id` would be if there were only certain CS agents who could only access certain users. Not sure how useful that is, but let me know if you want that added and I can do so.