Rename field to store user_id who performed last action
Store in request who performed action when changing request state
Use correct last user email when sending denied mail instead of always using admin