Added internal server-side management (state token and auth endpoints calls)