diff --git a/pages/api/index.ts b/pages/api/index.ts
index 512bd5d..2c87feb 100644
--- a/pages/api/index.ts
+++ b/pages/api/index.ts
@@ -90,7 +90,7 @@ export function getAuthTokenPath(path: string) {
   for (let r of protectedRoutes) {
     r = r.toLowerCase().replace(/\/$/, '') + '/'
     if (path.startsWith(r)) {
-      authTokenPath = `${r}/.password`
+      authTokenPath = `${r}.password`
       break
     }
   }