You're POST'ing to a non-SSL site: http://my.screenname.aol.com/_car/login/login.psp

Their form posts to an SSL address: ACTION="https://my.screenname.aol.com/_cqr/login/login.psp"

Do they allow non-SSL logins?

-Nitrox