Set-Cookie header in your response is only session cookie and this cookie should'nt matter, but that depends on existing vary cache rules. If a URL is cached there is no session, therefore a session cookie cannot be set, but this is nomal. To find out if I am right you must request a non cached...