Update otpController.js to check if phone number belongs to the employee then only proceed with otp generation

[onkar69483]

Currently it will only check if employee exists, but if we enter any phone number which will not belong to employee record, it still will send otp. Fix this.