Use study status properly

This blocks the attachment of raw data to the study until after the study metadata is approved. It also adds two buttons for admins to approve a study and to make a study public.

This finishes #476 
I don't think we want to allow people to change the study once it is awaiting approval, so this should be just `study_status = 'sandbox'`