Add demo app key/secret, fix API endpoints