Add parameter for round-tripping a custom state dictionary. Read the id_token from the authorization response if it exists.