diff --git a/app.py b/app.py
index c6f3b7c..638b614 100644
--- a/app.py
+++ b/app.py
@@ -36,8 +36,8 @@ def verify_password(username_or_token, password):
     # first try to authenticate by token
     user = User.verify_auth_token(username_or_token)
     if not user:
-    g.user = user
-    return True
+        g.user = user
+        return True
 
 @app.route('/api/token')
 @auth.login_required