Are you able to see the actual HTTP response you’re getting back? It’s unlikely you’re getting an actual null value back.
We’ve recently increased the strictness of our expectations with HTTP and OAuth. Verify that you’re making valid HTTP 1.1 requests – this means including a Host header for all requests, as well as supplying both appropriate Content-Type and Content-Length headers on non-GET methods.