Show terms and privacy policy if FxA is enabled (bug 1033851)

This adds an iframed overlay for the trusted-ui (based on code used by Persona) 

This was necessary because it's the UX for showing terms from the tui are poor given there's no route back to the pay flow. This works around that constraint and follows the same route that persona took to display t&cs and privacy policy in a ifram within an overlay.

For the non-tui experience this just opens up the standard terms / privacy pages in a new window/tab.

The styleguide has been updated to show the iframed-overlay at just tui screen-sizes.

Here's a link to the old PR for reference (was r+wc) https://github.com/mozilla/spartacus/pull/115
![styleguide-sm](https://cloud.githubusercontent.com/assets/1514/4359237/5528f738-4270-11e4-9fe7-1458bfd1a971.png)



this seems a little fragile. What if the trusted UI one day supports ``window.open`` by opening the URL in the browser app or something? Is there a better way to detect the need for iframing?