check custom error documents
The following worked for me.
I had two sites from one client. On both sites a directory needed password protection. One site it worked, the other not. So I checked the differences on the hosting setup page and found out that the working site had Custom error documents checked. And the site where it did'nt work had not. After checking the custom error documents field the protection worked right away.
Regards,
Anton