Account Approval

not quite polished enough for release, but generally working.

basic scheme is outlined here: https://docs.google.com/spreadsheet/ccc?key=0AmNmxQNk6euHdFdfQ0NKQWZzNGZsdERwVm01Y3ZMbmc&usp=drive_web#gid=0

no invitation functionality restored yet.