[cd34]

also, you mention your members section.

Is your members section also protected by an .htaccess file? if so, apache won't read the rules in the .htaccess file above the members directory and you would need to make the same entries in your members .htaccess that contains the auth directives.