I discovered for it to work that the secret keys cannot have spaces in them (as you could in version 2.5 of wordpress and 0.9.0.1 of bbpress). I generated a new secret key as one long string, and voila… users can pass through both programs without having to re-login.
