my test with htacess :

 cat .htaccess
AuthName "Administration"
AuthUserFile .htpasswd
AuthType basic
Require valid-user
Order deny,allow
Deny from all
Satisfy Any