On the Correctness of Gossip-Based Membership Protocols