Have any of you got a referenced assembly called Security.dll?
I read somewhere that if you have a dll of this name in your web bin folder, this will be used first for any basic security, and, of course, you will not have the relevant methods available.
I got this working by renaming the output of my Security.dll to have a fully qualified assembly name, so as to differentiate it from yer actual security.dll.