Thanks for checking on this. My hosting service (Hostmonster) couldn't figure this out. Their customer service is not good anymore. Anyway, I found a work around. I moved the login form to the same subdirectory as the files I need to restrict access to. It's not very elegant. But, on a 10+ year old site, it works.