Use study status properly

This blocks the attachment of raw data to the study until after the study metadata is approved. It also adds two buttons for admins to approve a study and to make a study public.

This finishes #476 
Sorry, sandboxed -> private.