I don't see anything immediately wrong with how you set up the cookie. I would look at what the script sends using Wireshark. If you don't see the cookie header, chances are that it's not getting (and thus, not sending) the cookie.