card-authorization placeholder