move referer from callbackURL to state

- Revert back callbackURL
- set referer to 'state'