Redirect login helper

- Extract URI filtering feature in a dedicated function, allow overide of `getCurrentUri()` to not use global vars
- Add filtering of Facebook params if the user decline the login
- Maker `appId` and  `appSecret` available to children classes
- Allow an other state generation algorithm
- Make `random()` private as it only concern the helper