Oops - You can Sign In Now
So it turns out that if you want to use an existing ASP.NET membership store with Graffiti, there's one thing you need to do with your existing users - add them to the "gEveryone" role. If you don't do that, your users will be able to sign in, but will get an "access denied" error when they redirect...