diff --git a/lib/roles/app.js b/lib/roles/app.js
index 391c16de..781a1a1f 100644
--- a/lib/roles/app.js
+++ b/lib/roles/app.js
@@ -33,6 +33,9 @@ module.exports = function(options) {
   io.set('log level', 1)
   io.set('browser client', false)
 
+  app.use('/static/lib', express.static(pathutil.resource('lib')))
+  app.use('/static', express.static(pathutil.resource('app')))
+
   app.use(express.cookieParser(options.secret))
   app.use(express.cookieSession({
     key: options.ssid
@@ -45,8 +48,6 @@ module.exports = function(options) {
   app.use(express.urlencoded())
   app.use(express.csrf())
   app.use(validator())
-  app.use('/static/lib', express.static(pathutil.resource('lib')))
-  app.use('/static', express.static(pathutil.resource('app')))
 
   // Output
   var push = zmq.socket('push')