diff --git a/backend/internal/api/server.go b/backend/internal/api/server.go
index 6464d33..b0a2686 100644
--- a/backend/internal/api/server.go
+++ b/backend/internal/api/server.go
@@ -50,11 +50,10 @@ func (s *Server) Router() http.Handler {
 
 		r.Group(func(r chi.Router) {
 			r.Use(auth.RequireSession(s.Session.Secret))
+			r.Use(s.resolveUser)
 
 			r.Get("/session/me", s.handleSessionMe)
 			r.Post("/session/logout", s.handleSessionLogout)
-
-			r.Use(s.resolveUser)
 			r.Post("/setup", s.handleSetup)
 
 			r.Route("/profile", func(r chi.Router) {