- Maybe defend notification_plus_one view from request forgery and add cache
to it to lower impact on DB.

- Maybe change from CRON + management command to some hipster stuff.

- Tox for testing using different django/python versions.