Yeah, I wish CGI::Cookie's constructor would error out or something when you try to do something like this. If you change your -expires option to "+1h" it will work as expected. (Notice how it's setting all the expires options to 1h?)