Hey everyone, could be a really easy step I'm missing but...

I'm running Apache web server and I'm currently trying to set up an Auth system. I have added a password for a new user through the htpassword utility. I also have added a .htaccess file in my directory I wish to protect:

Code:
AllowOverride AuthConfig
AuthType Basic
AuthName "Restricted"
AuthUserFile /usr/local/apache2/passwd/passwords
Require user user
I have not configured any other files and I feel I am missing a step. I can still get public access with that directory. Do I have to add/enable any mods? Any direction would be great!

Thanks,
Erik