Should this be `/api/user/termsAndConditions` ?