Found a solution that works.
it doesn't explain what's wrong with the .CUR file or code, but it does give me a working solution:
Use-Icons-for-cursors-not-CUR

not the slick result i wanted, but it does work.