The project is pretty well documented, but that is just ridiculous.

Just remove the ability to change password on the demo...