fixes #797

filter settings inputs, very basic
added js cookie leakage protection