Rack-csrf blocked by firefox?

a form that uses <%= Rack::Csrf.tag(env) %> seems blocked by Firefox on
server yet works with Chrome and for both browsers on laptop development
machine - any ideas ? thks