Review `AuthenticatedGaurd`'s validation sequential order

[marcjazz]

For instant, role access check is only useful if the user is authenticated, log should only be updated if the user successfully goes through all of the checks.