- Move initialization of user.credit_card_validation to view.
- Refactor controller to use permitted_params for credit card
  validation.