Move /widget redirect to lib/redirects module

There was a missing redirect in app.js from `/widget` -> `/login-widget2`.

We may now consider redirecting `/widget` and `/login-widget` -> `/lock`.

And for the moment still keep `/login-widget2` till complete migration from customers.