Added an example of an authenticated endpoint
Properly send back the state cookie