move OTT checking to use api module
rewrited session check logic
Merge pull request #5 from wookieelabs/OTT

Move OTT checking to user api module
Add read all function