work in progress: post email and password to deal site, get a 403