Use study status properly

This blocks the attachment of raw data to the study until after the study metadata is approved. It also adds two buttons for admins to approve a study and to make a study public.

This finishes #476 
So, if the user passes "private" as the argument, will it return *everyone*'s private studies, or just the user's...?