Full review (do not merge)

why call this method 'json'? This is a 'show' that only returns data when 'Accept' header is set to 'application/json'. You can use respond_to here...