diff --git a/middleware/middleware.go b/middleware/middleware.go
index f98d5779..db5dfdc7 100644
--- a/middleware/middleware.go
+++ b/middleware/middleware.go
@@ -137,16 +137,17 @@ func allDefaultMiddlewares(
 											securityHeaders(
 												cors(
 													csrf(
-														reloadProtector(
-															session(
-																wrappedHandler,
-																string(secretKey),
-																domain,
-																sessionCookieDuration,
-																SessionAntiReplyFunc,
-															),
+														// TODO: re-enable after https://github.com/komuw/ong/issues/447 is fixed.
+														// reloadProtector(
+														session(
+															wrappedHandler,
+															string(secretKey),
 															domain,
+															sessionCookieDuration,
+															SessionAntiReplyFunc,
 														),
+														// 	domain,
+														// ),
 														string(secretKey),
 														domain,
 														csrfTokenDuration,