beefed up security a little
moved member deletion into edit page