Remove access to athletes outside of devise