Use study status properly

This blocks the attachment of raw data to the study until after the study metadata is approved. It also adds two buttons for admins to approve a study and to make a study public.

This finishes #476 
`User` is instantiated in a few placed, can this be done once please?