.htaccess readable online

[Megg81]

it is possible to view my htaccess file by entering the url. Granted you have to log into the members area first - but still no good!!
The permissions are on R R R and also tried RW R R. But still it's accessible once logged in.

I found a line of code which is supposed to solve the issue but when that is entered you no longer have to log in at all to view the members directory so ive taken it back out.

Any suggestions very welcome. Thank you.

This is my current htaccess file:
ErrorDocument 401 /errorpages/authorisation.htm


AuthUserFile /websites/xxxxxxxxxxxxxxx/.htpasswd
AuthGroupFile /dev/null
AuthName "Only approved member access to this directory"
AuthType Basic
<Limit GET POST>
require valid-user
</Limit>
Order allow,deny
Satisfy any


The other information I've seen says insert this:
<Files .htaccess>
order allow,deny
deny from all
</Files>

perhaps im trying to insert it into the wrong place because it allows access without a pssword being required. Advice appreciated.