abandoned HMAC since it POSTs don't work on pre-14.2; post URL-encoded body instead of xml document
use xml document body instead of url encoded
test api save_card
strip extra HTML doc stuff when setting desc
expose html document so we can write it back again
final logic flow. skip saving a card if dry_run == true
remove pry