diff --git a/public/sendfile.php b/public/sendfile.php
index 6c5d120e30f0eed328bcda5e2e569a7b4590cad3..b9832a3cd44902f740b707cbd590bd57770a8781 100644
--- a/public/sendfile.php
+++ b/public/sendfile.php
@@ -43,6 +43,7 @@ $sess = sess();
 $auth = auth();
 $auth->setNobody(true);
 $sess->start();
+$auth->start();
 
 //Load plugins, unless they are disabled via an URL parameter.
 if (Request::int('disable_plugins') !== null && ($GLOBALS['user']->id === 'nobody' || $GLOBALS['perm']->have_perm('root'))) {