Skip ACL check for rendering widget

Assuming that when somebody shares the widget, he wants it publicly
accessible.

Also the widget does not leak much information, so privacy wise this
does not seem to be dangerous as well.

Signed-off-by: Michal Čihař <michal@cihar.com>
Make engage page public

Needed to make widgets work.

Signed-off-by: Michal Čihař <michal@cihar.com>
Mention ACL on engage page

Otherwise users might be disappointed that they don't see the project.

Signed-off-by: Michal Čihař <michal@cihar.com>