using net/http instead of shelling out to curl