diff --git a/backend/handlers/scheduling/scheduling_test.go b/backend/handlers/scheduling/scheduling_test.go
index bb702ac..afea2e1 100644
--- a/backend/handlers/scheduling/scheduling_test.go
+++ b/backend/handlers/scheduling/scheduling_test.go
@@ -209,8 +209,8 @@ func TestScheduling_UpdateDefaultHours_NonAdmin(t *testing.T) {
 		{Weekday: 6, StartTime: "00:00", EndTime: "00:00", IsOpen: false},
 	}
 
-	// Wrap handler with RequireAdmin middleware
-	w := makeAuthRequest(mw.RequireAdmin(http.HandlerFunc(UpdateDefaultHours)), "PUT", "/api/scheduling/default-hours", userToken, newHours)
+	// Wrap handler with RequireAuth + RequireAdmin middleware (auth first to populate context)
+	w := makeAuthRequest(mw.RequireAuth(mw.RequireAdmin(http.HandlerFunc(UpdateDefaultHours))), "PUT", "/api/scheduling/default-hours", userToken, newHours)
 
 	if w.Code != http.StatusForbidden {
 		t.Errorf("expected status 403, got %d. body: %s", w.Code, w.Body.String())
@@ -318,7 +318,7 @@ func TestScheduling_CreateExceptionalGroup_NonAdmin(t *testing.T) {
 		WeekStarts: []string{"2026-06-01"},
 	}
 
-	w := makeAuthRequest(mw.RequireAdmin(http.HandlerFunc(CreateExceptionalGroup)), "POST", "/api/scheduling/exceptional-groups", userToken, newGroup)
+	w := makeAuthRequest(mw.RequireAuth(mw.RequireAdmin(http.HandlerFunc(CreateExceptionalGroup))), "POST", "/api/scheduling/exceptional-groups", userToken, newGroup)
 
 	if w.Code != http.StatusForbidden {
 		t.Errorf("expected status 403, got %d. body: %s", w.Code, w.Body.String())
@@ -378,7 +378,7 @@ func TestScheduling_DeleteExceptionalGroup_NonAdmin(t *testing.T) {
 
 	userToken := jwt.GenerateUserToken("user-123")
 
-	handler := mw.RequireAdmin(http.HandlerFunc(DeleteExceptionalGroup))
+	handler := mw.RequireAuth(mw.RequireAdmin(http.HandlerFunc(DeleteExceptionalGroup)))
 	req := httptest.NewRequest("DELETE", "/api/scheduling/exceptional-groups?id=1", nil)
 	req.Header.Set("Authorization", "Bearer "+userToken)
 	w := httptest.NewRecorder()
@@ -507,7 +507,7 @@ func TestScheduling_UpdateExceptionalApplications_NonAdmin(t *testing.T) {
 	defer cleanup()
 
 	userToken := jwt.GenerateUserToken("user-123")
-	handler := mw.RequireAdmin(http.HandlerFunc(UpdateExceptionalApplications))
+	handler := mw.RequireAuth(mw.RequireAdmin(http.HandlerFunc(UpdateExceptionalApplications)))
 
 	reqBody := map[string]interface{}{
 		"groupId":    1,