fix Approve/deny controller bug