added middleware to redirect the user to a confirmation page whenever a study has a privacy_notice assigned, this is enforced and the user haven't accepted yet. superusers excluded