* Maybe defend notification_plus_one view from request forgery and add cache
to it to lower impact on DB.

* Maybe change from CRON + management command to some hipster stuff.
