Okay just asking cause I surely can't get what you say when I test these steps out.
If I create a personal album and make it private I am allowed to see it as long as I am cookied. If I am not cookied I get the password box if the password is not in the url. Remember if your visiting the album with the password in the url of course your going to gain access. Try just going to the category without the password part
