issue 63 solved:

 63) check if there is a problem with missing state in omniauth login.
     normally state should be included when using omniauth and callbacks
     solution: added state check in auth_controiller.create (maybe already in oauth2 middelware?)