More robust log-in code; there is no guarantee that "state" appears before "redirect_uri"
More robust log-in code; there is no guarantee that "state" appears before "redirect_uri"

apdavison/hbp-validation-client,apdavison/hbp-validation-client,apdavison/hbp-validation-client,apdavison/hbp-validation-client