generalized webui config access

mask_password replaced with webui_config that returns ALL
webui.attributes for future web-ui settings.