How to configure Apache so that users need to authenticate to see any resources, but users accessing http[s]://localhost/ don't need to log in.