Just add a field for "approved" in the database and set it to false or zero when someone registers.
Update your login server behavior to store the value of the approved field and add it to your rule for page access.
Then create an administrative section where you can mark users as approved.