Add site setting tos_accept_required. If enabled, users must check a box saying that they've read and accept the terms of service.