do authentication check before investment operations