fix oauth state in case it was urlencoded more than 1 time