I’ve tested this on my installation of ACF 5 and I’m not having any issues uploading images, even on a password protected page when logged out.
Can you try disabling other plugins? Maybe something is causing a compatibility problem or a blocking the upload?