Leaderboard.refresh() is not thread-safe

[pianiststickman]

Manifests as double-counting all users at startup because we instantiate and then immediately call refresh(). A workaround is simply to take refresh() out of the constructor.