Move the Auth statements to a <VirtualHost *:443> block.
(Someone else might have a more elegant and better answer).
force https with apache before .htpasswd
Move the Auth statements to a <VirtualHost *:443> block.
(Someone else might have a more elegant and better answer).