ok got it sorted. I had to go through all the word press files that set cookies and/or send out header information and wrap them in ob_start() -> ob_end_flush();
It’s going to make upgrading in the future a pain, so could the WP team look at wrapping all header information in these functions?