It's been changed again. You should probably modify the demo deployment to prevent password changes, as well as revert the system to a known good state every so often to undo whatever nonsense has been done to it.