diff --git a/backend/app.js b/backend/app.js
index 7f46dd3..263a965 100644
--- a/backend/app.js
+++ b/backend/app.js
@@ -18,7 +18,7 @@ const app = express();
 app.use(logger("dev"));
 app.use(express.json());
 app.use(express.urlencoded({ extended: false }));
-if (process.env.ZU_DISABLE_AUTH === "true") {
+if (process.env.ZU_DISABLE_AUTH !== "true") {
   app.use(
     bearerToken({
       headerKey: "Bearer",