From what I recall - if you set Director::set_environment_type('') to 'test' - only logged in users should be able to view the front end of the site. Visitors that are not logged in are prompted with a box asking them to log in.
Has this functionality been taken out of the recent release?
Cheers