Master Domain Site Structure & Content
Is it okay that a password protected page and images show up in sitemap or should I be worried?
The Google crawler will be blocked from viewing the page as it is password protected. You don't have to worry about partially indexing pages. The pages will show up in your sitemap but Google bot won't be able to crawl if its password protected.