Is the DNS domain of the host where you odata service is running on same DNS domain as the host where Fiori launchpad is running ? This is required because the cookie is a domain session cookie and will be sent by browser to the host based on cookie domain. If you check in fiddler trace you will see what domain the cookie was issued with and can then check if the odata service is being sent the cookie.
Thanks
Tim