Verify auth by providing/checking `state` value

[possibilities]

https://developer.github.com/v3/oauth/#1-redirect-users-to-request-github-access