What is the setting "allowoveride"? What does it mean?
It tells apache to obey .htaccess files in the document directory - in other words it "allows" the .htaccess file to "override" the configured parameters. The arguments to it say what subset of commands can be overridden - AuthConfig allows authorisation configuration.
P.