add auth_token helper method
small tweaks, fix typo in auth_token
add athlete show page, not json