Allow sync manually, instead force sync at ever login

Sync moved to helper, can be called from login and manually from api
this is similar to the `u.IsStale()` function. We should either use this function, or remove it in favor of the above code. I'm fine with either