diff --git a/openvpn/client/cliproto.hpp b/openvpn/client/cliproto.hpp
index f30d847a..6ff17a56 100644
--- a/openvpn/client/cliproto.hpp
+++ b/openvpn/client/cliproto.hpp
@@ -637,8 +637,8 @@ namespace openvpn {
 	    // If session token problem (such as expiration), and we have a cached
 	    // password, retry with it.  Otherwise, fail without retry.
 	    if (string::starts_with(reason, "SESSION:")
-		&& (autologin_sessions
-		    || (creds && creds->can_retry_auth_with_cached_password())))
+		&& ((creds && creds->can_retry_auth_with_cached_password())
+		    || autologin_sessions))
 	      {
 		log_reason = "SESSION_AUTH_FAILED";
 	      }