Misc bug fixes

- Use http_build_query to make sure query string is properly encoded
- Pass an antiforgery id during getAuthorizationURL as the state parameter as defined in oAuth spec
- Fix spacing / styling according to wordpress guideline
- Support domain_hint parameter to support tenant branding / auto redirection to on-prem ADFS server