this is kinda working.

the requests don't have any error checking/anything cool. and it also
returns gross XML but it's still a start