I had the same problem and authing on the main page fixed it.

If they're going to block unauthed stylesheet requests, surely they could at least make sure that the CF authenticator shows up on every page.