ignore non-acceptedTerms keys in PUT api/user endpoint
move acceptTerms() into view; fetch latest user objects from database when server renders index.html