diff --git a/http/http2_connection.hpp b/http/http2_connection.hpp
index 7e8224e..4b2d186 100644
--- a/http/http2_connection.hpp
+++ b/http/http2_connection.hpp
@@ -265,7 +265,7 @@
             std::make_shared<bmcweb::AsyncResp>(std::move(it->second.res));
 #ifndef BMCWEB_INSECURE_DISABLE_AUTHX
         thisReq.session = crow::authentication::authenticate(
-            {}, thisRes, thisReq.method(), thisReq.req, nullptr);
+            {}, asyncResp->res, thisReq.method(), thisReq.req, nullptr);
         if (!crow::authentication::isOnAllowlist(thisReq.url().path(),
                                                  thisReq.method()) &&
             thisReq.session == nullptr)
@@ -274,7 +274,7 @@
             forward_unauthorized::sendUnauthorized(
                 thisReq.url().encoded_path(),
                 thisReq.getHeaderValue("X-Requested-With"),
-                thisReq.getHeaderValue("Accept"), thisRes);
+                thisReq.getHeaderValue("Accept"), asyncResp->res);
         }
         else
 #endif // BMCWEB_INSECURE_DISABLE_AUTHX