Make sure that the permissions are set properly on your htaccess file. Also, make sure your authentication file is not accessible to the public. My hosting company here in Indianapolis, Indiana is pretty uptight about the security settings on their Apache servers, almost to the point of being ridiculous. But better safe than sorry.