Add viewed-by to /game/show response
Yield username only if token is valid