Add getValidAccessToken
Fix hash url handling.
Leverage state url hash param.
Fix client example.