add update balance forbidden test
implement update balance forbidden