Having had that a few times, and recently relaxing Firefox's referer policy for some other site compatibility which had avoided it before, I came to this workaround with uBlock Origin:

    jwz.org##^responseheader(set-cookie)
    jwz.org##^responseheader(location)

Hopefully documenting it doesn't perpetuate the arms race.