initial implementation of the non-authenticated portions of the API,
without any JSON parsing, as well as the calling method for the
authenticated API