make legal agreements only validate on create to allow password resets
refactor devise legal checkbox into partial