diff --git a/lib/middleware.js b/lib/middleware.js
index 5660388e..09d790d1 100644
--- a/lib/middleware.js
+++ b/lib/middleware.js
@@ -26,11 +26,11 @@ export const useSession = createMiddleware(async (req, res, next) => {
 
 export const useAuth = createMiddleware(async (req, res, next) => {
   const token = getAuthToken(req);
-  const payload = parseSecureToken(token, secret()) || {};
+  const payload = parseSecureToken(token, secret());
   const shareToken = await parseShareToken(req);
 
   let user;
-  const { userId, key } = payload;
+  const { userId, key } = payload || {};
 
   if (validate(userId)) {
     user = await getUser({ id: userId });