Add informed consent

pull request to address #21 
Is there a place where this switch is flipped?
How will the client know whether the user has given consent? (I know it's enforced on the server, but the client will neither check nor use this anywhere).