Just a simple reminder :
1) Create passwd file:
htpasswd2 -c /etc/apache2/htpasswd USER -> insert password
2) verify grant on path
3) create alias
Alias /protected /root/path <Location /protected > AuthType Basic AuthName "download for protected " AuthUserFile /etc/apache2/htpasswd Require valid-user </Location>