remove handleDemo() and demo routes

we should be able to do it via sacs and symfony security completely now.