fix for multisite user logging into a different blog: add them to pending list instead of redirecting to profile page (had to refactor check_user_access so we could call it from access_restriction for this case).