Two places in the auth DAO do not catch EmptyData...Exceptions and cast them to NotFounds.
Also, the auth filter needs to check ToU now that the state of the ToU boolean can go from null to true to false to true to ...