, in response to HTTP headers, there might be a conflict between your redirect and set-cookie. Use a browser-side debugger to see exactly what HTTP headers and status-codes are being received, and exactly how the browser is reacting to them. (You can see the cookies, too.)