Since you don't want to use CGI, I assume you don't want to use CGI::Cookie either? You'd need to set your own Set-Cookie headers, then. Some resources:

RFC 2109
Netscape's Spec

I think you're probably better off just using a module, though.

- Matt Riffle