Add 'state' parameter to authorization phase