Added a ad:sync_all_roles task
Fixed an issue where Role.trigger_sync would not be properly called when needed. Removed class variables for thread safety. Added syncing locks to avoid mass, needless calls to trigger_sync when a group gains a role.