diff --git a/auth_server.lua b/auth_server.lua
index 617daa8..4fbd365 100644
--- a/auth_server.lua
+++ b/auth_server.lua
@@ -73,7 +73,7 @@ while true do
             rednet.send(client_id, "user not found")
         end
 
-        if convert_password(data.users[request.username].password) == request.password then
+        if convert_password(request.password) == data.users[request.username].password then
             local token = generate_token(request.username)
 
             rednet.send(client_id, token)