change query so that users actually returns users that need to be approved; this was not working previously