I had a problem lately with password protected directory using Apache2 mod_auth. I had to serve one directory inside of password protected directory without any restrictions. Read more »