Adding X-Requested-With header to all API requests, to avoid a basic auth prompt for unauthenticated requests. Adding demo credentials to login page. Updating a few npm audit flagged packages in npm.