removed cookies from settings EP, since we now pass it in the query of settingsupdate