Demo frontend served from demo.sico.software, calling https://api.sico.software cross-origin via header-mode auth.
demo.sico.software
https://api.sico.software