feature: get player by code, if requesting as a player GET /players