@Marwan when you said TBA headers you mean Oauth1 right?
2cents I haven't played with the NS Oauth2 at all,but
I see that NS supports Oauth2 now so you might have better chance with that, the token handshake from Facebook last time I played with it via third party was based on Oauth2...