The headers of an SSI (including Set-Cookie) never make it anywhere near the browser; they're strictly interpreted by the server. You'll have to have the browser fetch something (such as an image, or the next page) to include headers to set a cookie.

-- Randal L. Schwartz, Perl hacker