enable variant view in api. variants list is already accessible, and show method already defined on variants
controller, so no reason not to expose this

Fixes #4336