add sample environment file
Closes #2 State token now checked on callback

Next url is now saved in session