With an appropriate login one can access the unpublished documents. Note that https is required, in order to protect any passwords used from packet snooping.
https
This document can be validated.