Actually, that's exactly what I had done, the alert displays a cookie and the $ENV{HTTP_COOKIE} is empty which lead me to believe that JS is creatimg the cookie correctly but perhaps this is not being communicated to the enviroment variable. I'm pretty sure it's the latest version of CGI.pm but i'll grab a fresh copy and try again.