Approves a pending user institution membership. The caller must be the referrer (req.body.ref must match the authenticated user). On approval, the membership status is set to active and an approval email is sent to the user.
JWT token passed in x-access-token header