Override authorize_params
so that we can be deliberate about the value for state and not use the session which is unavailable inside of an iframe for some browsers (ie Safari)
def authorize_params
options.authorize_params[:state] ||= SecureRandom.hex(24)
params = options.authorize_params.merge(options_for("authorize"))
if OmniAuth.config.test_mode
@env ||= {}
@env["rack.session"] ||= {}
end
params
end