If I write a site that logs users in, I keep track of them merely by storing their username in a database as well as a cookie value representing that they are logged in, so do they need to accept terms before logging in?