Fix handling of approvals returned by uaa

UAA no longer includes the userName in returned approvals, and instead returns the userId