[ZWeb] Membership roster

[Adrian Hungate]

Is the roster running the search query before it asks me to login? If so,
this is probably not a security issue, but I'd guess you don't need the
extra loading.

Also, do you want to allow blank searches, or should it confirm that the
user is not trying to harvest the member-base?

Adrian...

--
The difficulty of tactical maneuvering consists in turning the devious into
the direct, and misfortune into gain.
- Sun Tzu