fix(tc): redirect unauthenticated POST to login instead of crashing

Author: mroderick

app/controllers/terms_and_conditions_controller.rb

@@ -10,6 +10,13 @@ def show
   end
 
   def update
+    # The show action skips accept_terms, but unauthenticated users can still
+    # POST directly to update. Redirect to login to avoid NoMethodError on nil.
+    unless logged_in?
+      redirect_to '/auth/github'
+      return
+    end
+
     @terms_and_conditions_form = TermsAndConditionsForm.new(terms_params)
     if @terms_and_conditions_form.valid?
       member = current_user