diff --git a/copanier/__init__.py b/copanier/__init__.py
index 80dc840..631ee04 100644
--- a/copanier/__init__.py
+++ b/copanier/__init__.py
@@ -72,7 +72,7 @@ options(app)
 
 @app.listen("request")
 async def auth_required(request, response):
-    if not request.route.payload.get("genuine"):
+    if request.route and not request.route.payload.get("genuine"):
         token = request.cookies.get("token")
         email = None
         if token:
@@ -81,15 +81,16 @@ async def auth_required(request, response):
         if not email:
             response.redirect = f"/sésame?next={request.path}"
             return response
-    user = Person(email=email)
-    request["user"] = user
-    session.user.set(user)
+        user = Person(email=email)
+        request["user"] = user
+        session.user.set(user)
 
 
 @app.listen("request")
 async def attach_request(request, response):
     response.request = request
 
+
 @app.listen("request")
 async def log_request(request, response):
     if request.method == "POST":