updated user approval to use params[:approved] only if it equals false