Added overload to User object to be created from an IUser object. Added GetUserSections to IUserService.
Changed WebSecurity to expose IUser instead of User, then fixed up the knock-on effect, obsoleted all calls to the legacy User object in the base classes to point to use the WebSecurity class to access the new user object.