Fixes: State retrieval in OpenID AuthorizationController, closes #430