accounts resave on every auth--not just the first one
sync now asks for moves reauth instead of signing out