Customer cant logout

WordPress 4.9.6 with Woocomerce 3.40 on Apache 2.4.6 with PHP 7.2.5 and Storefront Theme 2.3.1

Hi

I have secured my install with a htaccess style config as recommended in many places (although the lines below sit in my main Apache config files as I don’t allow .htaccess files):

<FilesMatch “wp-login.php”>
AuthType Basic
AuthName “Protected Area”
AuthUserFile /xxx/xxx/htpasswd
Require valid-user
</FilesMatch>

However, this breaks the (customer) user logout mechanism as this uses the wp-login.php file which non admin users now cannot access.

There should be a way around this using something like QUERY_STRING “.*action=logout.*” or LocationMatch directives, but I cannot get them to work.

All help and advise appreciated.

Thanks very much
Kevin