Five lessons from the Guardian's membership strategy, three years on