My authorization is working.. that is not the problem here. I've used the Auth... directives to place enable an htpasswd file, and this part is
working. (and indeed, to allow these commands in an .htaccess file, you need the AllowOverride; I know about this)
My question is a little different. If I've enabled an password on the website root folder, how can I disable it for a certain sub folder? ..something like "AuthType None"

Right now, I've solved my problem temporary by playing with the require user directives, and allowing another user in the subfolder.