A similar question was posted a few days ago, but at the risk of sounding like a broken record...

Chances are you have an incorrectly configured .htaccess, authenticating only GET requests whilst letting POSTs through unchallenged.

    --k.