Pure JS stab at Dribbble API

dribbble.js

var user = 'dope';
var limit = 9;
var accessToken = 'TOKEN';

var dribbble = new XMLHttpRequest();
dribbble.responseJSON = null;
dribbble.open('GET', 'https://api.dribbble.com/v1/users/'+user+'/shots?access_token='+accessToken, true);

dribbble.onload = function() {
  if (dribbble.status >= 200 && dribbble.status < 400) {
    dribbble.responseJSON = JSON.parse(dribbble.responseText);
    var shots = dribbble.responseJSON;

    shotImages = "<img src="+ shots[0].images.hidpi +">";
    document.getElementById('dribbble').innerHTML += shotImages;
  }
};
dribbble.send();