disallow checkout without card
test code added