wrapping all instance api calls for user in a guarantee_auth block

adding dependencies and correcting yield fault
testing to make sure no response invokes twice