Don't check against CSRF if there was no state (code) generated.

If in a signle handler you call the getCode twice, the function
logs that there was a Token mismatch at ERROR level. This is not
valid because the functions resets the state but forgets to check
against it
Remove excessive identation and check if state is set before comparing
Add linebreak for code standarts
Cleaner condition
Remove check of $this->state if is null since it's not needed
Merge pull request #122 from jimmykane/master

Don't check against CSRF if there was no state (code) generated.