add todo that this demo probably shouldn't hard-code the client id for a single app. add a bug to set up a free identity just for this demo, that that there aren't weird interactions between the two apps.