Update version to 2.5.0-rc.3-dev
Don't require consumer key if bearer token is set. Fix #57
Add changelog entry for #57
Add note about #57 to readme
Finish 57-no-signing-for-app-only-auth