Use oauth2 state parameter as now supported by paia auth