The current logic doesn't handle properly the use case of the user putting in a bad promo code, or using an email that maps to a forbidden domain.
The current logic doesn't handle properly the use case of the user putting in a bad promo code, or using an email that maps to a forbidden domain.