don't leak cardnr

I was annoyed by people complaining...

• this MR is on top of !6 (merged) because I am lazy, sorry...
• closes #30 (closed)
• this kinda throws the baby out with the bathwater and always stores the cardnr in the session