In production, require customer_id be passed also. As a security measure, so people can't modify the cards on arbitrary JIDs.
Add magic comment
Going to use this as a customer id for the whole billing system So it's not really braintree specific, even if we make it match the one there.
fix typo
Initial commit