I'm pretty sure you are thinking right. I enabled the auth in .htaccess but I can still access the site without log in.
I'm googling it looking for a solution. unlikely I'm not a BSD or apache expert.
I've got it! my httpd.conf was prevent .htaccess to override rules.
now all is working right. thank you!
Last edited by dannyb78; 04-14-2014 at 10:27 AM.