diff --git a/src/Robware.Api.Auth/Controllers/UserController.cs b/src/Robware.Api.Auth/Controllers/UserController.cs
index ba5a51f..e8f6545 100644
--- a/src/Robware.Api.Auth/Controllers/UserController.cs
+++ b/src/Robware.Api.Auth/Controllers/UserController.cs
@@ -1,9 +1,9 @@
 using System;
 using System.Threading.Tasks;
+using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using Microsoft.Extensions.Logging;
 using Robware.Api.Auth.Models;
-using Robware.Auth;
 using Robware.Auth.Users;
 
 namespace Robware.Api.Auth.Controllers {
@@ -19,6 +19,7 @@ namespace Robware.Api.Auth.Controllers {
 		}
 
 		[HttpPost(nameof(Authenticate))]
+		[Authorize]
 		public async Task<ActionResult<User>> Authenticate(LoginRequest request) {
 			var (result, user) = await _authenticator.Authenticate(request.Username, request.Password);
 			switch (result) {