Trainers awaiting approval can authorize and remove users on tools

[everett-ripley]

After adding a new trainer to a tool, that trainer can add and revoke user access to tools before being approved.

This was tested both with the superuser account and a random user account with no permissions. Both accounts were added as trainers by superuser.