diff --git a/app/Http/Kernel.php b/app/Http/Kernel.php
index b225877efd..5450788a8a 100644
--- a/app/Http/Kernel.php
+++ b/app/Http/Kernel.php
@@ -90,8 +90,8 @@ class Kernel extends HttpKernel
                 StartFireflySession::class,
                 ShareErrorsFromSession::class,
                 VerifyCsrfToken::class,
-                CreateFreshApiToken::class,
                 AuthenticateSession::class,
+                CreateFreshApiToken::class,
             ],
 
             // only the basic variable binders.
@@ -155,8 +155,8 @@ class Kernel extends HttpKernel
                 MFAMiddleware::class,
                 Range::class,
                 Binder::class,
-                CreateFreshApiToken::class,
                 InterestingMessage::class,
+                CreateFreshApiToken::class,
             ],
             // MUST be logged in
             // MUST have 2fa