Update version to 2.5.0-rc.3-dev
Don't require consumer key if bearer token is set. Fix #72
Add changelog entry for #72
Add note about #72 to readme
Finish 72-no-signing-for-app-only-auth