Admin API: Filter out unapproved users when the `active` filter is on