AdminAPI: Filter users by `need_approval`