CFCookie

<CFCOOKIE NAME="cookie_name "
   VALUE="text"
   EXPIRES="period"
   SECURE="Yes/No"
   PATH="urls"
   DOMAIN=".domain ">

Cookies written with CFCOOKIE do not get written to the cookies.txt file until the browser session ends. Until the browser is closed, the cookie resides in memory. If you do not have an EXPIRES attribute in a CFCOOKIE, the cookie set exists only as long as the client browser is open. When the browser is closed, the cookie expires. It is never written to the cookies.txt file.

NAME	Required. The name of the cookie variable.
VALUE	Required. The value assigned to the cookie variable.
EXPIRES	Schedules the expiration of a cookie variable. Can be specified as a date (as in, 10/09/97), number of days (as in, 10, 100), NOW, or NEVER. Using NOW effectively deletes the cookie from the client's browser.
SECURE	Optional. Indicates the variable has to transmit securely. If the browser does not support Secure Socket Layer (SSL) security, the cookie is not sent.
PATH	Optional. Specifies the subset of URLs within the specified domain to which this cookie applies: PATH="/services/login" Separate multiple entries with a semicolon ( ; ).
DOMAIN	Specifies the domain for which the cookie is valid and to which the cookie content can be sent. An explicitly specified domain must always start with a dot. This can be a subdomain, in which case the valid domains will be any domain names ending in this string. For domain names ending in country codes (such as .jp, .us), the subdomain specification must contain at least three periods, e.g., .mongo.stateu.us. In the case of special top level domains, only two periods are needed, as in .allaire.com. When specifying a PATH value, you must include a valid DOMAIN. Separate multiple entries with a semicolon ( ; ).