update: It still works with firefox, the culprit was firefox’s enhanced security thing in the settings. It works now after I disabled it.