"sophia" was requiring a username and password because I screwed up and had the htaccess file for the dev site installed on the production site. I am not sure how long this has been an issue, but it is now fixed.