Correct the description for the privacy policy and terms of service.

They can be either a URL or an absolute path. Must be served over SSL.

fixes #60