Changed user/role document IDs to start with "_sync:"

Prevents name collisions with app data documents.
This obviously breaks all existing databases (or at least makes all
their users/roles disappear), but so did the previous commit :)