updated api with admin dashboard + approve / suspend user action