bug fix: allow to approve pending user directly.