diff --git a/app/controllers/registrar/base_controller.rb b/app/controllers/registrar/base_controller.rb
index 2a0d0a7aa..90f2f5210 100644
--- a/app/controllers/registrar/base_controller.rb
+++ b/app/controllers/registrar/base_controller.rb
@@ -21,8 +21,9 @@ class Registrar
 
       return if allowed
 
-      flash[:alert] = t('registrar.authorization.ip_not_allowed', ip: request.ip)
       sign_out current_user
+
+      flash[:alert] = t('registrar.authorization.ip_not_allowed', ip: request.ip)
       redirect_to registrar_login_url
     end