fix validation so that only applies to approved reqs
add CatRentalRequestsController logic