- added "APPROVE" security action to HtmlContentApproval block
- added "APPROVE" to supported actions of Site model (it already had auth records for it in the database)