Allow authentication with demo URLs; resolves #1