Pass state to authorization request

[Ettore]

i don't believe that's possible. We have the usual oauth callback but that's only for authorization purposes.
Regarding cookies, actually, we should not send those back... if you do that's likely a bug on our end.