Password protect a custom template

by

Post_password_required returns false in two cases:

  1. No password required

  2. Cookie with password present

So, once you have entered the password and logged out, the cookie will still be present and you get access to the content.

(When I go to your site, without login or password, I get the password field just as I should)