REST_Controller - Facebook return_url # causing problems?

Or are they suppose to come back from FB but instead of ?arg1=... they come back as #arg1=... ?

Yes, this. Facebook is prepending the # instead of ?.

To get REST_Controller to recognise the GET args I need to replace it with ?.