card_number should not be in signed_field_names

[kristianperkins]

As per the cybersource documentation, the card_numberfield should not be signed. Currently, test.html includes card_number in the list of fields to sign.

From signed_field_names description:

All request fields should be signed to prevent data tampering, with the exception of the card_number field and the signature field.