Changed dispatch workflow to more simple

- fix for HTML when no route
- moved reflection and param checking part into controller
- removed lot of code from Route because of previous point
- again simplified dispatch in Tikori
session and user fixes for modules

- checking permissions changed a little, they're checked in different place now
- fixed '@' getting on non-area sites
- renamed Session and User modules