diff --git a/plugins/Login/Auth.php b/plugins/Login/Auth.php
index 158d4e09dd772b4035895c1bb55ae13e2e1c85ca..97c2a374eaff901a163144dd4c2f484a058f7166 100644
--- a/plugins/Login/Auth.php
+++ b/plugins/Login/Auth.php
@@ -76,6 +76,8 @@ class Auth implements \Piwik\Auth
      */
     public function initSession($login, $md5Password, $rememberMe)
     {
+        Session::regenerateId();
+
         $tokenAuth = API::getInstance()->getTokenAuth($login, $md5Password);
 
         $this->setLogin($login);
@@ -97,7 +99,6 @@ class Auth implements \Piwik\Auth
         $cookie->setHttpOnly(true);
         $cookie->save();
 
-        @Session::regenerateId();
 
         // remove password reset entry if it exists
         Login::removePasswordResetInfo($login);