you would need to have a users table in your database, and create a new record with the user name and password combination to access the download page.
Then run the security assist wizard to create the login, logout and registration pages.
you can delete the registration page after the wizard creates it if you like.
The wizard will create a "logged into <your users table>" access rule, apply that access rule to the download page.