There is no built-in authentication right now. But usually, since a gunicorn app is usually recommended to run behind a webserver (like nginx), I usually put it behind an nginx, then nginx does auth + ssl.
http://wiki.nginx.org/HttpAuthBasicModuleProbably at some point it'll make sense to build built-in auth to have a user base in a database for instance.