Add authorize_url_with_state to allow for CSRF protection.

Merge of https://github.com/attachmentsme/ruby-box/pull/81