diff --git a/src/routes/oauth2.js b/src/routes/oauth2.js
index 3c2dd116e..4dd105dbf 100644
--- a/src/routes/oauth2.js
+++ b/src/routes/oauth2.js
@@ -280,10 +280,10 @@ function renderAccountSetupSite(res, req, userObject, error) {
 
 // -> GET /api/v1/session/account/setup.html
 function accountSetupSite(req, res) {
-    if (!req.query.reset_token) return sendError(res, req, 'Missing Reset Token');
+    if (!req.query.reset_token) return sendError(req, res, 'Missing Reset Token');
 
     user.getByResetToken(req.query.reset_token, function (error, userObject) {
-        if (error) return sendError(res, req, 'Invalid Reset Token');
+        if (error) return sendError(req, res, 'Invalid Reset Token');
 
         renderAccountSetupSite(res, req, userObject, '');
     });
@@ -301,7 +301,7 @@ function accountSetup(req, res, next) {
     debug('acountSetup: with token %s.', req.body.resetToken);
 
     user.getByResetToken(req.body.resetToken, function (error, userObject) {
-        if (error) return sendError(res, req, 'Invalid Reset Token');
+        if (error) return sendError(req, res, 'Invalid Reset Token');
 
         userObject.username = req.body.username;
         userObject.displayName = req.body.displayName;