Brief Summary
My default search engine in Orion is Kagi. There is a setting to provide a private Kagi API key to use Kagi even in private browsing mode. While I had a token set, I every time was presented with a login window on Kagi (see below). My token must have changed, because after updating my token sting, the Kagi search worked as expected even in private mode.
As you can imagine, it was annoying, made me want to use DDG or something else in private browsing mode. Not good as a paying user, as all I needed was an indication that my API token is wrong.
Suggestion
If the user is providing an API token that is invalid, please display on the login screen a clear indication that "The API token provided is invalid. Please update your browser setting by logging in and getting your updated token here."
Thanks!