Additional provider: DrupalOAuth2: Reorganized the handling of the state parameter (which is used to avoid CSRF attacks).