Roles and Permissions
The assignment of roles and permissions should have an extra password driven confirmation. It's too easy to accidentally add a role/permission in an athlete's profile. Accidentally giving someone "admin" permission could be a disaster. Checking any field should bring up a pop up window asking for a confirmation and password. This is a pretty serious security issue that is currently lacking.