Add news bullet about R6
Allow null endpoint

This happens for testing OAuth 1.0, and for some APIs which hand out token and token secret directly