Unable to password protect web files

Using Identity Management the UI is accessible to all users so I wish to restrict access to it whilst still allowing access to the reset_password.html.
To do this I've created a password file /etc/httpd/conf/user.htpasswd and then within /etc/httpd/conf/httpd.conf I added the lines that are in the attached file (couldn't put them here as they caused the page to display wrong characters) to block access to the directory but allow access to the reset_password.html file.

However, at the browser all files are still accessible. Any ideas what I'm doing wrong?