diff --git a/recruitment/decorators.py b/recruitment/decorators.py
index b10b218e4..e75f8171c 100644
--- a/recruitment/decorators.py
+++ b/recruitment/decorators.py
@@ -156,11 +156,12 @@ def candidate_login_required(view_func):
         if request.user.has_perm("recruitment.view_candidate"):
             return view_func(request, *args, **kwargs)
         if request.user:
-            if (
-                request.user.employee_get.stage_set.exists()
-                or request.user.employee_get.recruitment_set.exists()
-            ):
-                return view_func(request, *args, **kwargs)
+            if request.user.is_authenticated:
+                if (
+                    request.user.employee_get.stage_set.exists()
+                    or request.user.employee_get.recruitment_set.exists()
+                ):
+                    return view_func(request, *args, **kwargs)
 
         if "candidate_id" in request.session:
             return view_func(request, *args, **kwargs)
diff --git a/recruitment/urls.py b/recruitment/urls.py
index df34d9ade..a173de1e0 100644
--- a/recruitment/urls.py
+++ b/recruitment/urls.py
@@ -524,12 +524,12 @@ urlpatterns = [
         name="candidate-self-tracking-rating-option",
     ),
     path(
-        "candidate-self-status-tracking",
+        "candidate-self-status-tracking/",
         views.candidate_self_status_tracking,
         name="candidate-self-status-tracking",
     ),
     path(
-        "candidate-self-status-tracking/<int:cand_id>",
+        "candidate-self-status-tracking/<int:cand_id>/",
         views.candidate_self_status_tracking_managers_view,
         name="candidate-self-status-tracking",
     ),