diff --git a/ctl/auth_token_internal_test.go b/ctl/auth_token_internal_test.go
index e850a6a2c..579a9f7d7 100644
--- a/ctl/auth_token_internal_test.go
+++ b/ctl/auth_token_internal_test.go
@@ -61,8 +61,8 @@ func TestDeviceAuthRequest(t *testing.T) {
 			if err := json.NewEncoder(&b).Encode(goodResponse); err != nil {
 				t.Fatalf("unexpected error encoding goodResponse: %v", err)
 			}
-			w.Write(b.Bytes())
 			w.WriteHeader(http.StatusOK)
+			w.Write(b.Bytes())
 		}),
 	)
 	cli := &http.Client{}