diff --git a/handler/auth.go b/handler/auth.go
index dfc36f8..f533fa7 100644
--- a/handler/auth.go
+++ b/handler/auth.go
@@ -294,7 +294,7 @@ func (handler AuthImpl) handleChangePasswordComp() http.HandlerFunc {
 	return func(w http.ResponseWriter, r *http.Request) {
 
 		session := middleware.GetSession(r)
-		if session.User == nil {
+		if session == nil || session.User == nil {
 			utils.DoRedirect(w, r, "/auth/signin")
 			return
 		}