diff --git a/src/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php b/src/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php
index 02479e986..26c0a38d6 100644
--- a/src/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php
+++ b/src/opnsense/mvc/app/library/OPNsense/Mvc/Dispatcher.php
@@ -157,11 +157,12 @@ class Dispatcher
         $controller->response = $response;
         $controller->security = new Security($session, $request);
 
-        $controller->initialize();
-
         if ($controller->beforeExecuteRoute($this) === false) {
             return false;
         }
+        /* call initialize() after authentication */
+        $controller->initialize();
+
         $this->returnedValue = $controller->{$this->action}(...$this->parameters);
         $session->close();
         $controller->afterExecuteRoute($this);