Why would CRSF require WWW ahead of the url ?

[eluser]vincej[/eluser]
I turned on CRSF in the config and I got the classic

An Error Was Encountered The action you have requested is not allowed.

then for some bizaar reason I noticed that IE 11 would work, whilst Firefox and Chrome would not.

Then I noticed that if I placed www ahead of the url, the page would load.

So now I have chnaged the base url to include the http://www

My question is Why would this make a difference ???

Many thanks !

[eluser]joergy[/eluser]
I'm not sure, but this might be a matter of cookie handling. Cookies can be bound to domains, and probably your "system" (browser and or web server) took the domains being different...
CRSF uses a "second" channel to verify requests. And this mainly is done with the help of cookies.

greets
joergy