diff --git a/app.js b/app.js
index 878c85729..b4451f951 100644
--- a/app.js
+++ b/app.js
@@ -175,7 +175,7 @@ app.use(flash())
// passport
app.use(passport.initialize())
-app.use(passport.session())
+app.use(useUnless(['/status', '/metrics'], passport.session()))
// check uri is valid before going further
app.use(require('./lib/web/middleware/checkURIValid'))
diff --git a/public/docs/release-notes.md b/public/docs/release-notes.md
index f410b32bf..ed7ac20a2 100644
--- a/public/docs/release-notes.md
+++ b/public/docs/release-notes.md
@@ -1,5 +1,11 @@
# Release Notes
+## Unreleased
+
+### Bugfixes
+
+- Fix error in the session handler when requesting `/metrics` or `/status`
+
## 1.9.1 2021-12-02
This release increases the minimum required Node versions to `12.20.0`, `14.13.1` and `16`.