Allow sync manually, instead force sync at ever login

Sync moved to helper, can be called from login and manually from api
let's call this the `sync` package intsead, since it will have a very targeted purpose. Also the code will end up being quite complex as we improve sync strategies so it will be good to have its very own package :)