Change parse_authorization_response to always return state (if present
in the uri).