Is there a way to force the Express Migration Tool (v1.0 in my case*) to re-syncronize security items. It seems that this is a known issue that it will only sync security users and roles once. (See this KB article which indicates this is still an issue in v2.0).
I'm assuming it writes some sort of marker somewhere.