update AppRetrieveFiles
bugfix: avoid assigning anonymous user to membership application_approved_user, denied_user and action_taken_user