This is a forth approach. Using the web matrix security classes you can use simple membership provider which can use EF so users and roles can be part of your domain model but also part of the IPrincipal and IIdentity MVC helpers.
I have created an example Github project to see how this can be used with automated self registration and email signup / password reset and the like.
