I'm not sure if this is the exact callback URL but it looks like the parameters are separated by commas? If that's the case I imagine it would definitely be part of the problem. What version of ShopifyApp, Ruby, and Rails are you running? Does this occur when you run it locally behind a tunnel as well?
With the above info I can attempt to replicate locally.
Cheers.