Added demo endpoint so the Access-Control headers can be exposed