An internal redirect is, uh, internal!

Since nothing is going to the browser, how do you expect a cookie to be sent to the browser? Last time I checked, most browsers were not omniscient.