fiat 0.37.0

fix(roles): ensure UserRolesSyncer always refreshes anonymous user

if we lose the redis data the user roles syncer would no longer reload the anonymous
permissions.

also this caps the number of retries that the refresh will do to something that aligns with
the caching agents timeout value. The agent will get rescheduled after that point by the
scheduler.