diff --git a/firstuseauthenticator/firstuseauthenticator.py b/firstuseauthenticator/firstuseauthenticator.py
index 7836b8f..8699d56 100644
--- a/firstuseauthenticator/firstuseauthenticator.py
+++ b/firstuseauthenticator/firstuseauthenticator.py
@@ -46,6 +46,7 @@ class ResetPasswordHandler(BaseHandler):
         html = self.render_template('reset.html')
         self.finish(html)
 
+    @web.authenticated
     async def post(self):
         data = {}
         for arg in self.request.arguments: