fixed auth middleware

server/middleware/utils.go

@@ -11,9 +11,11 @@ func ApplyAuthenticationByConfig(next http.Handler) http.Handler {
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		if config.Instance().RequireAuth {
 			Authenticated(next)
+			return
 		}
 		if config.Instance().UseOpenId {
 			openid.Middleware(next)
+			return
 		}
 		next.ServeHTTP(w, r)
 	})