diff --git a/inception/inception-app-webapp/src/main/java/de/tudarmstadt/ukp/inception/app/config/InceptionSecurityWebUIBuiltInAutoConfiguration.java b/inception/inception-app-webapp/src/main/java/de/tudarmstadt/ukp/inception/app/config/InceptionSecurityWebUIBuiltInAutoConfiguration.java
index da6b906efb2..0f3ed5afd8f 100644
--- a/inception/inception-app-webapp/src/main/java/de/tudarmstadt/ukp/inception/app/config/InceptionSecurityWebUIBuiltInAutoConfiguration.java
+++ b/inception/inception-app-webapp/src/main/java/de/tudarmstadt/ukp/inception/app/config/InceptionSecurityWebUIBuiltInAutoConfiguration.java
@@ -68,7 +68,7 @@ public SecurityFilterChain webUiFilterChain(HttpSecurity aHttp,
         authorizations.requestMatchers("/login.html*").permitAll();
         accessToStaticResources(authorizations);
         accessToRemoteApiAndSwagger(authorizations);
-        authorizations.requestMatchers("/" + NS_PROJECT + "/*/join-project/**").permitAll();
+        authorizations.requestMatchers(NS_PROJECT + "/*/join-project/**").permitAll();
         accessToApplication(authorizations);
         authorizations.anyRequest().denyAll();