Allow sync manually, instead force sync at ever login

Sync moved to helper, can be called from login and manually from api
can remove since we would use http response codes to return status