I have had this issue in my organization, In order to get the browser client code to work for standard users, my IT administrator had to whitelist anvil.app in the work firewall.
My development PC has a whitelisted static IP, so of course it worked fine for me until I gave people the go-live version which promptly did not work for anyone! 
So if:
I would definitely look in that direction first.