diff --git a/odoo/http.py b/odoo/http.py
index b794dce36f8..872fe0548d9 100644
--- a/odoo/http.py
+++ b/odoo/http.py
@@ -992,15 +992,15 @@ class OpenERPSession(sessions.Session):
         uid = odoo.registry(db)['res.users'].authenticate(db, login, password, env)
         self.pre_uid = uid
 
-        user = request.env(user=uid)['res.users'].browse(uid)
-        if not user._mfa_url():
-            self.finalize()
-
         self.rotate = True
         self.db = db
         self.login = login
         request.disable_db = False
 
+        user = request.env(user=uid)['res.users'].browse(uid)
+        if not user._mfa_url():
+            self.finalize()
+
         return uid
 
     def finalize(self):