actually use new tornado_settings

instead of deprecated webapp_settings
Merge pull request #6513 from minrk/finish-deprecating-tornado-settings

actually use tornado_settings