Authenticator accepts a state parameter

How about `optional_params` here, since we're trying to avoid adding extra keys with blank strings to the params hash.