Refresh sso groups

3rd party app would run it at its discretion.

For example … master user account updates profile picture on master site … call sync_sso to pass it to Discourse in a background job.