Restrict watchable#possible_watcher_users to non-anonymous users

Fixes #416