return an AuthenticationResult from handleIdSiteCallback
refactor, new test
error message refactor
don’t store clientState on auth result

it’s accessible through idSiteResponse, so let’s just do that cuz
we already to it for isNewSub