fixed a bug where the req user was being checked for cards rather than the response user
fixed a bug where the req user was being checked for cards rather than the response user

1self/api,1self/api,1self/api,1self/api