FIX: Don't skip TOS check when using 3rd party auth