Fixes: State retrieval in OpenID AuthorizationController and test for Controller, #430