[bug 1091088] Validate show= parameter on /questions

This fixes a traceback with empty and invalid values for show=
r?