Start on members' pages. Centralised CSRF checking.