Alex;
It's not that the admin folder is not password protected, we just recommend using IIS security, not cookie-based security, since it's so much more secure.
If you don't know how to password protect a folder in IIS, you can read how here:
http://www.hostmysite.com/support/dedicated/IIS/passwordprotect/
ITCN NJ Web Design and Marketing is a web design and application programming firm located in Morristown, New Jersey.