we'll want to replace this with `requests`, but OK for now