Everything 401s on LiteSpeed or CGI hosting

Some hosts — LiteSpeed especially, and Apache under CGI or FastCGI — strip or relocate custom request headers, so the hub never sees X-K2S-Token.

The hub already recovers the token from every place those setups stash it, and falls back to a token query parameter as a last resort. If a site still cannot authenticate, check whether a page cache is serving a stale response for the registration call: a cached /register reply hands out a token that was already replaced.