Ok, the issue appears to be how I was starting the pypi server.

I've gone through many versions of this but in the end the directory name following -P must include .htpassed

pypi-server run -p 8080 d:\pypi_packages d:\pypi_packages -P d:\pypi_server\.htpasswd --log-file d:\pypi_server\pypiserver.log -vvv