Fixed a few wording issues, tweaked how users sign in / show suspended /...

... show approved and fixed password reset feature that Devise 3.1 broke
This looks kind of  messy, but essentailly what I'm doing is:

```
  devise_scope :user do
    authenticated :user do
      (routes that require authentications)
    unauthenticated :user do
      (routes that are seen by logged out users)
    end
end
```

This fixes a couple things -- first, when a non-logged-in user goes to the root url, they don't immediately get the flash error message saying they need to log in first -- it just shows the login screen (why show an error when the user hasn't even done anything yet?)

It also means we can define custom routes that go to the same places (like /) for logged in and non logged in users.

Finally, it can help make sure that an unauthenticated user can't access these routes. This can be an additional check if we accidentally missed a   ```before_filter :authenticate_user!``` on some controller/action.