Yes, that's how you do it. Create a create a group for public, create a user "public" with a long dummy password in the public group, put that username in the config as above, assign read rights to the custom page to the public group.
To have it auto-refresh you need to emit the following html...