Limits user to one loan and updates loan status and lender_id