state

The CSRF state token echoed back from the OAuth redirect.