Use study status properly

This blocks the attachment of raw data to the study until after the study metadata is approved. It also adds two buttons for admins to approve a study and to make a study public.

This finishes #476 
Well this is a discussion then. We are using this to say whether we need an admin to move from sandbox to private. Do we also want to toggle needing an admin from private to public?