Thought of this being the issue, but I thought this stored the cookie:

print $session->header();
[download]

Yes? No? Thanks.

Update: I stopped the process after write_session() and I did have a cookie written (according to the cookies dialog in Firefox). But whe allowed to proceed to the check_session a new cookie and session are written.