diff --git a/api.js b/api.js
index 19d31365..ea2c6470 100644
--- a/api.js
+++ b/api.js
@@ -326,7 +326,7 @@ server.use(
                             { projection: { authVersion: true } }
                         );
                         let userAuthVersion = Number(userData && userData.authVersion) || 0;
-                        if (!userData || tokenAuthVersion < userAuthVersion) {
+                        if (userData && tokenAuthVersion < userAuthVersion) {
                             // unknown user or expired session
                             try {
                                 /*