richtext widget: pass allowed_tags to template
scribe: update to latest version, track deps with bower