JSON Web Tokens

Uses proper JWT for `state` parameter with the exception of the `rfp` value, cleans up some existing code.