a Go HTTP client with timeouts