Add coupon handling

Should `$_POST['coupon']` be assumed to be present or should we check it like the others via:

    $coupon = isset ($_POST['coupon']) ? $_POST['coupon'] : '';