I have not used Tag Manager but I suspect the issue is caused by the ??
at the end of you URL. My suggested solution would be to escape this so your URL will look like this:
/secure/common/callback?
/secure/common/callback\?
You may also want to investigate if you can use regex with your rules to make the above more accurate.