FEATURE: add sync_sso endpoint