simplified api client, still needs authentication