diff --git a/server/auth.go b/server/auth.go
index 0d685de07..6943e24f3 100644
--- a/server/auth.go
+++ b/server/auth.go
@@ -359,7 +359,7 @@ func handleLoginFromHeaders(ds model.DataStore, r *http.Request) map[string]inte
 	}
 
 	userRepo := ds.User(r.Context())
-	user, err := userRepo.FindByUsername(username)
+	user, err := userRepo.FindByUsernameWithPassword(username)
 	if user == nil || err != nil {
 		log.Warn(r, "User passed in header not found", "user", username)
 		return nil