Correct communication from app to api, fix settings to avoid cookie collisions