Added implicit class to provide request.approval and request.user

This allows us to remove some boilerplate from the controllers. I also
modified it to return a LazyId rather than a RefById.