AFAIK cookies must be set in the header, which is why I
suggested adding it to the start of the HTML, unless you
dynamically generate some javascript to set the cookie
inline. I've used this strategy before and you have to
be careful due to different browsers supporting different
flavours of javascript.