feat: moving user management service to django

Other than refactoring, I:

1. moved the /header URL call to here to make client updater service the only exposed service of our cluster
2. moved much of the policy check code to user management service