51233868ca
account.approved never fires for a signup that went through open registration without ever being queued (no prior block on that address). process_signup was waiting on that event forever, so the first flagged signup on any new bad IP/email domain never got welcomed or watched by the suspicious-sweep. Now checks Admin::Account.approved from the account.created payload and acts immediately if it's already true.