If DEMO_SECRET is set on the server, enter it here once per browser session. Leave empty when auth is disabled.
DEMO_SECRET