diff --git a/src/modules/api/api.ts b/src/modules/api/api.ts
index 522f2aa..2c0e82b 100644
--- a/src/modules/api/api.ts
+++ b/src/modules/api/api.ts
@@ -90,6 +90,7 @@ function GetApp(): ModuleType {
                 '/api/postfeedback',
                 '/api/fosuploader',
                 '/api/badtestsender',
+                '/api/validationtoken',
             ],
         })
     )
diff --git a/src/modules/api/submodules/userManagement.ts b/src/modules/api/submodules/userManagement.ts
index f01a2a2..1ed9b0a 100644
--- a/src/modules/api/submodules/userManagement.ts
+++ b/src/modules/api/submodules/userManagement.ts
@@ -338,6 +338,12 @@ function setup(data: SubmoduleData): Submodule {
                     isValid: isValid,
                 })
             } else {
+                if (!user) {
+                    res.json({
+                        result: 'error',
+                        msg: 'you are not logged in',
+                    })
+                }
                 const key = v5(validationTokenName, user.pw)
 
                 res.json({