1. Password protecting a subdirectory is not so easy if you’re using WordPress. Here is a discussion and 2 possible solutions.

At the top of /.htaccess add these 2 lines:
ErrorDocument 401 ./error.html
ErrorDocument 403 ./error.html

2. Force Chrome to re-prompt for credentials of a Basic Auth password protected directory – solution found here:

It seems chrome will always show you the login prompt if you include a username in the url e.g.
http://username@mysite.com

3. An old post that I forgot to publish 3 years ago. Found it in the drafts: 3 things about cfcache