Validating credit card numbers for online payments