Login error messaging is more useful when it's actually set
Setting mustache.auction_ends_at in the configuration will allow the app to automatically stop accepting bids at the specified time
Actually save when a user accepts the terms
Create an Auction model to group some of the global Auction-level methods that were living in the Bid model; add messaging to the homepage for non-logged-in users explaining the auction process