From 4701722a32dbc86eb40dd5d10b6b39de1f852316 Mon Sep 17 00:00:00 2001
From: pursual <pursual@gmail.com>
Date: Mon, 7 Dec 2015 11:23:16 -0500
Subject: [PATCH] fix(core): Serve static files without session init

Fixes #1089
---
 config/lib/express.js | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/config/lib/express.js b/config/lib/express.js
index 0f3c8b947c..53ca6418c9 100644
--- a/config/lib/express.js
+++ b/config/lib/express.js
@@ -228,6 +228,12 @@ module.exports.init = function (db) {
 
   // Initialize Express view engine
   this.initViewEngine(app);
+  
+  // Initialize Helmet security headers
+  this.initHelmetHeaders(app);
+
+  // Initialize modules static client routes, before session!
+  this.initModulesClientRoutes(app);
 
   // Initialize Express session
   this.initSession(app, db);
@@ -235,12 +241,6 @@ module.exports.init = function (db) {
   // Initialize Modules configuration
   this.initModulesConfiguration(app);
 
-  // Initialize Helmet security headers
-  this.initHelmetHeaders(app);
-
-  // Initialize modules static client routes
-  this.initModulesClientRoutes(app);
-
   // Initialize modules server authorization policies
   this.initModulesServerPolicies(app);