diff --git a/app/tests/conftest.py b/app/tests/conftest.py
index 7505c07..41a3fb1 100644
--- a/app/tests/conftest.py
+++ b/app/tests/conftest.py
@@ -3,7 +3,7 @@ from fastapi.testclient import TestClient
 import pytest
 from unittest.mock import patch
 from app.shared.config import ALLOW_ANY_EMAIL
-from app.shared.db.user_state import UserState
+from app.web.db.user_state import UserState
 from app.shared.settings import Settings
 
 
diff --git a/app/tests/endpoints/test_sheet.py b/app/tests/endpoints/test_sheet.py
index a39e0c8..3241c7c 100644
--- a/app/tests/endpoints/test_sheet.py
+++ b/app/tests/endpoints/test_sheet.py
@@ -46,7 +46,7 @@ def test_create_sheet_endpoint(app_with_auth, db_session):
 
     # switch to jerry who's got less quota/permissions
     from web.security import get_user_state
-    from app.shared.db.user_state import UserState
+    from app.web.db.user_state import UserState
     app_with_auth.dependency_overrides[get_user_state] = lambda: UserState(db_session, "jerry@example.com")
     client_jerry = TestClient(app_with_auth)
 
diff --git a/app/shared/db/user_state.py b/app/web/db/user_state.py
similarity index 100%
rename from app/shared/db/user_state.py
rename to app/web/db/user_state.py
diff --git a/app/web/endpoints/default.py b/app/web/endpoints/default.py
index 0568e51..86d7d70 100644
--- a/app/web/endpoints/default.py
+++ b/app/web/endpoints/default.py
@@ -7,7 +7,7 @@ from app.shared.config import VERSION, BREAKING_CHANGES
 from app.shared.log import log_error
 from app.shared.db import crud
 from app.shared.schemas import ActiveUser, UsageResponse
-from app.shared.db.user_state import UserState
+from app.web.db.user_state import UserState
 from app.web.security import get_user_auth, bearer_security, get_user_state
 from app.shared.user_groups import GroupInfo
 
diff --git a/app/web/endpoints/sheet.py b/app/web/endpoints/sheet.py
index 643ecac..d202834 100644
--- a/app/web/endpoints/sheet.py
+++ b/app/web/endpoints/sheet.py
@@ -5,7 +5,7 @@ from fastapi.responses import JSONResponse
 from sqlalchemy import exc
 from sqlalchemy.orm import Session
 
-from app.shared.db.user_state import UserState
+from app.web.db.user_state import UserState
 from app.shared import schemas
 from app.shared.task_messaging import get_celery
 from app.web.security import get_user_state
diff --git a/app/web/endpoints/url.py b/app/web/endpoints/url.py
index 72e0cc2..86a7c67 100644
--- a/app/web/endpoints/url.py
+++ b/app/web/endpoints/url.py
@@ -10,7 +10,7 @@ from app.shared import schemas
 from app.shared.task_messaging import get_celery
 from app.web.security import get_token_or_user_auth, get_user_state
 from app.shared.db import crud
-from app.shared.db.user_state import UserState
+from app.web.db.user_state import UserState
 from app.shared.db.database import get_db_dependency
 
 from urllib.parse import urlparse
diff --git a/app/web/security.py b/app/web/security.py
index cefabdc..87bfe99 100644
--- a/app/web/security.py
+++ b/app/web/security.py
@@ -6,7 +6,7 @@ from fastapi.security import HTTPBearer, HTTPAuthorizationCredentials
 from app.shared.config import ALLOW_ANY_EMAIL
 from app.shared.settings import get_settings
 from app.shared.db.database import get_db
-from app.shared.db.user_state import UserState
+from app.web.db.user_state import UserState
 
 settings = get_settings()
 bearer_security = HTTPBearer()