Rename user_type to role.
Rename {hashed_password} -> {password_hash}.
Replace user roles with user approval.
Add updated_at field to User.
Add bio and name fields to User.
Add approval logic to update_user.