Try to remove the Files
directive and Deny from all
(this will block everything unless you also define Allow from ...
):
<Directory /var/www/hprcc-exp.unl.edu/staff/>
AuthType Basic
AuthName "HPRCC Staff Utilities"
AuthUserFile /var/etc/hprccpass
Require valid-user
</Directory>