Added code to verify that the state token returned matches that sent.