Add the UUID authentication featue.
Fix the Session.state BUG when the OAuth response_type is code