The authorized user list is maintained in .htpasswd, not .htaccess. (I think).
AuthUserFile /url/url/url/url/cgibin/.htpasswd
AuthGroupFile /dev/null
AuthName "Nate's hideout"
AuthType Basic
<Limit GET POST>
require valid-user
</Limit>
Note that the above .htaccess file refers to the password file.
Russ, NCNE