diff --git a/rugwebsite/views.py b/rugwebsite/views.py
index 758d1b4..ac3fa1d 100644
--- a/rugwebsite/views.py
+++ b/rugwebsite/views.py
@@ -33,7 +33,6 @@ def gdpr_ask_agreement(request):
     return render(request, 'rugwebsite/gdpr.html', {'show_agree_button': False, 'shownav': True})
 
 
-@login_required
 def gdpr_create_agree(request):
     if request.method == 'POST':
         form = GDPRAgreeCreate(request.POST)
@@ -49,6 +48,7 @@ def gdpr_create_agree(request):
 
         return render(request, 'rugwebsite/gdpr_agree_success.html', {'shownav': True})
     else:
+        assert request.user.is_authenticated(), "User should be authenticated."
         data = json.dumps([request.user.username, request.user.first_name, request.user.last_name, request.user.email])
         sha256 = hashlib.sha256()
         request.session['samlPersoonsgegevensHash'] = sha256.hexdigest()