401(k) dos and don'ts