Please review: Added state parameter in authorization url