correctly uses $SETTINGS to set cookie parameters