Have you used wireshark or something similar to verify that you actually do get four cookies?