There are too many good anecdotes to quote in these notes on a UX vs. security in healthcare paper. You should just click through and read the whole thing.
https://ferd.ca/notes/paper-you-want-my-password-or-a-dead-patient.html
This is a placeholder, overwrite this by putting a file at
$STATIC_DIR/static/terms-of-service.html
See the Static Directory docs for more info.