I'm getting exactly the same thing at the moment on the AA.com site (1 year later than you) and I've tried different browsers. It refuses to take the security code I enter and comes back with a blank box.
Wondering if it's related to my use of a voucher to part pay for the ticket? The voucher applied ok.