Looks like someone's first action logging in was setting the password to something else. I've reset it back to "helloworld".

This is something you should absolutely be prepared for and guard against if you are opening a public demo account.

First launch learnings. It's something I'd definitely have done a bit more if I were more prepared, but I mainly launched today because of the current situation, not because I had thought through all aspects of launch and felt ready.