Add an explicit check for ToU acceptance in the auth filter.  Before, the checks were always done as part of other method calls.