fixes a flaw with session incremental id and better verification for oauth callback state param
Merge pull request #87 from andreywix/Feature-Security

Feature: Security