diff --git a/app.js b/app.js
index 878c85729..b4451f951 100644
--- a/app.js
+++ b/app.js
@@ -175,7 +175,7 @@ app.use(flash())
 
 // passport
 app.use(passport.initialize())
-app.use(passport.session())
+app.use(useUnless(['/status', '/metrics'], passport.session()))
 
 // check uri is valid before going further
 app.use(require('./lib/web/middleware/checkURIValid'))