.htaccess files is a bit of a pain (no easy way to change or reset passwords)

Have you tried using Apache::Htpasswd before? There's a review and some example code on this site if you're interested.

Authentication and CGI should be of some assistance as well.