fixed #2934

src/routes/authentication.js

@@ -168,8 +168,6 @@
 
 	Auth.continueLogin = function(req, res, next) {
 		passport.authenticate('local', function(err, userData, info) {
-			var passwordExpiry = userData.passwordExpiry !== undefined ? parseInt(userData.passwordExpiry, 10) : null;
-
 			if (err) {
 				return res.status(403).send(err.message);
 			}
@@ -182,6 +180,8 @@
 				return res.status(403).send(info);
 			}
 
+			var passwordExpiry = userData.passwordExpiry !== undefined ? parseInt(userData.passwordExpiry, 10) : null;
+
 			// Alter user cookie depending on passed-in option
 			if (req.body.remember === 'on') {
 				var duration = 1000*60*60*24*parseInt(meta.config.loginDays || 14, 10);