diff --git a/scm-webapp/src/main/java/sonia/scm/security/SecurityFilter.java b/scm-webapp/src/main/java/sonia/scm/security/SecurityFilter.java
index 75b418daee..15a1341cfa 100644
--- a/scm-webapp/src/main/java/sonia/scm/security/SecurityFilter.java
+++ b/scm-webapp/src/main/java/sonia/scm/security/SecurityFilter.java
@@ -83,12 +83,12 @@ public class SecurityFilter implements Filter
 
         if (user != null)
         {
-          ((HttpServletResponse) res).sendError(
-              HttpServletResponse.SC_UNAUTHORIZED);
+          chain.doFilter(new ScmHttpServletRequest(request, user), res);
         }
         else
         {
-          chain.doFilter(new ScmHttpServletRequest(request, user), res);
+          ((HttpServletResponse) res).sendError(
+              HttpServletResponse.SC_UNAUTHORIZED);
         }
       }
       else