Which part is confusing you? You have to wait to send the headers until after you add the cookie to them. Look at this example from the CGI.pm documentation.