Add widget config page at /widgets/config (behind basic auth). Closes #551.