Authentication control based on previous actions