Don't allow custom state param

In omniauth-oauth2 gem v1.1 it is used for CSRF as per the oauth2 spec:
http://tools.ietf.org/html/draft-ietf-oauth-v2-27#page-25
Rename MIT-LICENSE to just LICENSE
README tweaks