Version 1.0.5 is the current stable public release. This might be the last beta release. A new beta of 1.1 was released, version 1.1b4. Some more possibly unsecure programs removed from the support directory. POST now allowed to directory index CGI scripts.
Actions now work with files of the default type.
However, this also affects GET requests. This is fixed in the latest beta version. This .htaccess is designed to restrict access based on browser address, and not require any user authentication. It is used in the NCSA tutorial on access restriction. The problem is that Apache will ask for user authentication, which fails because none has been setup.