diff --git a/web/api/app/Controller/AppController.php b/web/api/app/Controller/AppController.php
index 190241889..6775fa846 100644
--- a/web/api/app/Controller/AppController.php
+++ b/web/api/app/Controller/AppController.php
@@ -73,8 +73,8 @@ class AppController extends Controller {
     $zmOptAuth = $config['Config']['Value'];
 
     if ( $zmOptAuth=='1' ) {
-      if ( $_REQUEST['user'] and $_REQUEST['pass'] ) {
-        $this->loadModel('User');
+      $this->loadModel('User');
+      if ( isset($_REQUEST['user']) and isset($_REQUEST['pass']) ) {
         $user = $this->User->find('first', array ('conditions' => array (
                 'User.Username' => $_REQUEST['user'],
                 'User.Password' => $_REQUEST['pass'],