demo application illustrating ROCA-style validation