diff --git a/src/pretixbase/tests/test_middleware.py b/src/pretixbase/tests/test_middleware.py
index 7b35f1b0bf..9b9fb0e2f8 100644
--- a/src/pretixbase/tests/test_middleware.py
+++ b/src/pretixbase/tests/test_middleware.py
@@ -23,24 +23,24 @@ class LocaleDeterminationTest(TestCase):
 
     def test_global_default(self):
         c = Client()
-        response = c.get('/control/')
+        response = c.get('/control/login')
         language = response['Content-Language']
         self.assertEqual(language, settings.LANGUAGE_CODE)
 
     def test_browser_default(self):
         c = Client(HTTP_ACCEPT_LANGUAGE=self.TEST_LOCALE)
-        response = c.get('/control/')
+        response = c.get('/control/login')
         language = response['Content-Language']
         self.assertEqual(language, self.TEST_LOCALE)
 
         c = Client(HTTP_ACCEPT_LANGUAGE=self.TEST_LOCALE_LONG)
-        response = c.get('/control/')
+        response = c.get('/control/login')
         language = response['Content-Language']
         self.assertEqual(language, self.TEST_LOCALE)
 
     def test_unknown_browser_default(self):
         c = Client(HTTP_ACCEPT_LANGUAGE='sjn')
-        response = c.get('/control/')
+        response = c.get('/control/login')
         language = response['Content-Language']
         self.assertEqual(language, settings.LANGUAGE_CODE)
 
@@ -48,12 +48,12 @@ class LocaleDeterminationTest(TestCase):
         c = Client()
         cookies = c.cookies
         cookies[settings.LANGUAGE_COOKIE_NAME] = self.TEST_LOCALE
-        response = c.get('/control/')
+        response = c.get('/control/login')
         language = response['Content-Language']
         self.assertEqual(language, self.TEST_LOCALE)
 
         cookies[settings.LANGUAGE_COOKIE_NAME] = self.TEST_LOCALE_LONG
-        response = c.get('/control/')
+        response = c.get('/control/login')
         language = response['Content-Language']
         self.assertEqual(language, self.TEST_LOCALE)
 
@@ -67,6 +67,6 @@ class LocaleDeterminationTest(TestCase):
         })
         self.assertEqual(response.status_code, 302)
 
-        response = c.get('/control/')
+        response = c.get('/control/login')
         language = response['Content-Language']
         self.assertEqual(language, self.TEST_LOCALE)
diff --git a/src/pretixcontrol/permissions.py b/src/pretixcontrol/permissions.py
index 0c0b313af0..c6eb961fbe 100644
--- a/src/pretixcontrol/permissions.py
+++ b/src/pretixcontrol/permissions.py
@@ -11,7 +11,8 @@ def event_permission_required(permission):
     """
     def decorator(function):
         def wrapper(request, *args, **kw):
-            if not request.user.is_authenticated():
+            if not request.user.is_authenticated():  # NOQA
+                # just a double check, should not ever happen
                 return HttpResponseForbidden()
             perm = EventPermission.objects.get(
                 event=request.event,