title: .htaccess only protecting folder sometimes
body: <h3>Website</h3>
  <p><a href="https://ochab.us" rel="nofollow noreferrer">https://ochab.us</a></p>
  <h3>Desired behaviour</h3>
  <p>When you click on any of the projects on the homepage, for it to require a password before taking you to that page.</p>
  <h3>Actual behaviour</h3>
  <p>If you go directly to the project page (<a href="https://ochab.us/work-locked/security-platform" rel="nofollow noreferrer">https://ochab.us/work-locked/security-platform</a>), it requires a password. This is correct.</p>
  <p>If you go to <a href="https://ochab.us" rel="nofollow noreferrer">https://ochab.us</a> and right click, &quot;Open in a new Tab&quot; on one of the projects, it requires a password. This is also correct.</p>
  <p>If you go to <a href="https://ochab.us/" rel="nofollow noreferrer">https://ochab.us/</a> and click on a project it somehow skips the password protection. This is the issue I'm trying to fix.</p>
  <h3>The code</h3>
  <p>I have a site structure setup like this:</p>
  <pre><code>/index.html
  /work-locked/project-1/index.html
  /work-locked/project-2/index.html
  /work-locked/project-3/index.html
  /work-locked/project-4/index.html
  </code></pre>
  <p>I set up <code>/work-locked/.htaccess</code> to look like this:</p>
  <pre><code>AuthType Basic
  AuthName &quot;Please message me via my contact page to get access.&quot;
  AuthUserFile /my-path/.htpasswd
  require valid-user
  </code></pre>
  <p>I wondered if the password was cached, but I've tried it in different browsers and via BrowserStack and the same result.</p>
  <p>MediaTemple is my host.</p>
  <p>Thanks!</p>