only allow card owners to manipulate them
Merge pull request #52 from EndangeredMassa/card-owner

only allow card owners to manipulate them