Set securityTrimmingEnabled to true in the sitemap file.

securityTrimmingEnabled is set to false by default in the MvcSiteMapProvider v4 branch so the bug did not appear when PostDemo was linked to the v4 library.