title: How to ensure user accepts terms and conditions on ASP.NET site
body: <p>We're modifying an existing ASP.NET application.  We added a Terms and Conditions page with an "Accept" button that stores that choice in the user's account data.  We want to prevent the user from accessing any page when the user has not accepted the Terms and Conditions.</p>
  
  <p>I think we want to do this by looking up the "accepted terms" value upon login and storing it in the session.  Then we need to intercept every request and check for that session value.  (If it's not there, we redirect the user to the Terms and Conditions page.)</p>
  
  <p>Is the PreRequestHandlerExecute method the right place to put this check?  This method also gets called on requests for stylesheets and images, so it doesn't seem like it was intended for this purpose.</p>