Cookies in URL

Hello,

We were running 2.7.1 and have some of our URLs set to be http://domain.com/services&sec=xxxx. We use the &sec=xxxx to set a cookie to the value of xxxx on the page that we are taken to. This worked in 2.7.1. We have now upgraded to 2.8.4 and we are getting a 404 error on any page that has the &sec=xxxx on the end of the URL.

Just wondering what has changed to disallow this from working now and if there is another way that we can get this to work, so the URL will have what we need to set the cookie to.

Any help would be appreciated.