The basic idea is to check for authentication in the controller's before() method, which gets executed prior to the controllers action methods. Here are links to a couple of examples:
Official Kohana Documentation - Controller: Before and after
Unofficial Kohana 3 Wiki - Using Auth with template extended controllers