Don't just take your friends' word for it — three steps to vetting a financial adviser