changed cookie max size to 2kb to avoid 400 bad request problem