i still vote for having the firewall on ^/demo only. then you don't get the editor on / which is a good thing imo, as there is nothing to edit on the homepage.