Added state parameter during oauth handshakes, fixed #39