so yesterday i'd asked why i was getting this error ("header is not NLAuth scheme") when posting to my restlets using Oauth. Turns out it's a bug in Postman v4.9.1 where a comma is missing from the Authorization header. So i'm marking this as resolved.