no it is not asking for the spacer image, it is asking for everything that is based within the admin folder, and all other subsidary folders. images, CSS, ect

you must protect the ADMIN php page its self, ONLY
use the following to acheive this

http://www.elated.com/articles/password-protecting-your-pages-with-htaccess/