diff --git a/cmd/coordinator/modproxy.go b/cmd/coordinator/modproxy.go
index 077df12..9df8e24 100644
--- a/cmd/coordinator/modproxy.go
+++ b/cmd/coordinator/modproxy.go
@@ -42,8 +42,8 @@
 		return
 	}
 	if !strings.Contains(builder, "-") || builderKey(builder) != pass {
-		http.Error(w, "bad username or password", http.StatusUnauthorized)
 		log.Printf("modproxy: sending 401 Unauthorized due to invalid key for builder %q", builder)
+		http.Error(w, "bad username or password", http.StatusUnauthorized)
 		return
 	}