good question...
I'm gonna look into cause I'm curious too...
I should mention that most of those sites with "normal" logins validate users against a database, not an .htaccess file...All my sites validate that way and use page level security checks. However .htacess is too common, there must be a way