add TOS & privacy pages; login fixes