all paperclip assets will use s3.bestofama.com CNAME rather then s3.amazonaws.com
put notice on login form linking to the Privacy Policy