WordPress gets a bit enthusiastic about putting it's 404 error pages about the place - even redirecting 401 and 403s. So to allow you to use .htaccess password protected directories whilst also running WP insert these lines into your root .htaccess
ErrorDocument 401 /PATHTOPASSWORDPROTECTEDDIR
ErrorDocument 403 /PATHTOPASSWORDPROTECTEDDIR
