Expose generated state to allow for CSRF validation.

Exposing the generated state gives developers the ability to store and validate for CSRF protection.