Prefer given state param over generated in authorization url. Fix #82.