Add authorize_url_with_state to allow for CSRF protection.

I created a new method, but it may be a good idea to actually require both redirect_uri and state since otherwise apps may be vulnerable to CSRF.