Admin can approve and deactivate users. Admin controller