All Content management systems are public. If one wants to have internal content that requires to be password-protected, then he/she would have an alternate option to keep their content on an internal server and utilize the CMS application decorator that impersonates your CMS website.