authz: various fixes to `PermsSyncer`

Created by: unknwon

This PRs fixes two minor things:

1. Exclude site admins from the list of users with no permissions.
2. Fix wrong form of argument passed to QueryContenxt.
3. Set dbconn.Global synchronously.

Stacked on #8927