Add overridable hook in Auth0ServletCallback to allow validating
the state query param.