make regstraton URL preload the cart with the entire offer, That means the Annual premium 10 pre-loaded as well as the dscount voucher also pre-added. And any login and account creaton page should be done over SSL connection anything less is amaturi

Doing the above would have negated almost all of the problems activating the offer, assuming everything else worked...