Apache .htaccess file

[Michael Pratt]

what is the proper way in requiring a password access via https?

I can only get it to work using non-secure means using this .htaccess file using 
http://www.domain.com/members

AuthType Basic
AuthName "members only"
AuthGroupFile /www/members/.htgroup
AuthUserFile /www/users/usrs
require group users

If I point to https://www.domain.com/members it goes right through without a prompt for a password.

What am I missing here.

Mike