Implemented json and XML parsing of the payloads to get back usernames

There are tests for the payloads that I can think of we could possibly
want to rate limit on.

I think we'll need better requirements regarding how to handle the
myriad ways to authenticate in v2.0