The problem is is that the cookie values must not be concatenated, they have to be sent as seperate cookies (project rules). ..I also have to use the CGI::cookie module (hence no use of set-cookie)