still need to allow blank expiration dates