before allowing a project to be approved. (In approveproject_form,
this meant removing the automatic transition from 'newuser' to
'unverified')

Since this check is done in two places, once in the form, and once in
the page that does the work, it's possible for this to get out of
sync.