Next step: look at the source of the generate HTML page - maybe your browser doesn't display something that's actually there.

If that's not the case, use a network traffic analyzer like wireshark to see if the cookie is actually included on the request to the second script.