I tried both ways and even when I was in a clean browser once I hit submit it came back and said I wasn't eligible.
UPDATE: The previous times I was adding my wife as an authorized user (she already has the card) - when I removed her it went through fine with the bonus - so I'm guessing they scan both SSNs, but not certain.