Sumada Kaabaha: login control

Requires admin approval for new users to log in. Admins can selectively auto-approve specific user roles while others require manual review.