I thought I was reading the cookie while I was checking for pass.

He said

I don't see where you assign to %cookie anywhere before you check it for pass.

you obviously missed that bit, which is why its so big