Open this workspace through a hosted session.

The patient workspace now prefers the backend-managed session cookie instead of direct demo bearer access.