Use redirect like you would header. It's can take all the args that header can. In my experience it works but I don't know if it's standard to take a cookie on a redirect but it has worked for me.

 print redirect(-location=>$my_url,-cookie=>[$cookie1,$cookie2],-expir
+es=>'+1h' );
[download]

-Lee

"To be civilized is to deny one's nature."