Secure RSS

The restful authentication plugin can use standard HTTP auth when the client is requesting XML, as will be the case when someone is hitting an RSS feed. So, simply using that plugin, with the :login_required before filter in place for your feed action, will cause the authentication challenge to happen when a feed reader attempts to load the feed.