RichM - depends on how you have your site. You can password protect a directory with htaccess (good), or you can protect an individual page with javascript (not that great).

Or you can get various free scripts for message boards and stuff - those usually have private areas built-in. I recommend phpbb2, but it requires the host to have php and mysql, and you're not going to get that for free unless you're really lucky.