Are you allowed to overwrite authentication settings using htaccess files? See http://httpd.apache.org/docs/current/mod/core.html#allowoverride