Removed second render on widget drop

Removed second render on widget drop since it's already been called and
it messes with OAuth widgets (such as Now).  This commit also makes
optional permission widgets refresh instead of render when possible.