This may not apply to this discussion, but be careful when testing / debugging on cassini. Its threaded model is different from IIS. I had security issues (thread.CurrentPrincipal, etc.) on cassini that just disappeared when I started debugging from IIS.
Frustrating developers
source share