From a recent Firefox release note:
“In upcoming releases, Firefox will show an in-context message when a user clicks into a username or password field on a page that doesn�t use HTTPS. That message will show the same grey lock icon with red strike-through, accompanied by a similar message, �This connection is not secure. Logins entered here could be compromised.�
This site uses http, not https.