diff --git a/src/api/http/api.go b/src/api/http/api.go
index 1fbf9a530a..e1d6f7df5e 100644
--- a/src/api/http/api.go
+++ b/src/api/http/api.go
@@ -485,6 +485,7 @@ func (self *HttpServer) tryAsClusterAdmin(w libhttp.ResponseWriter, r *libhttp.R
 	if err != nil {
 		w.WriteHeader(libhttp.StatusUnauthorized)
 		w.Write([]byte(err.Error()))
+		return
 	}
 	statusCode, body := yieldUser(user, yield)
 	w.WriteHeader(statusCode)