Often, I come across clients that want their website protected. If it's a really tiny site I will just use the AuthType directive to manage authentication. Usually we just give out one password which I'm sure is bad practice.
Is there a good self-managed password system out there? Looking for something really simple. Users register and then e-mail get's sent to client to approve. No bells or whistles necessary.