Oauth server not handling state when requesting a token directly

[jwforres]

This results in the web console not returning to the page you were previously on before being redirected to login.

[liggitt]

The osin library is not including state in the hash for the implicit flow

[liggitt]

Fixed in https://github.com/RangelReale/osin/pull/32
Will look into updating osin or cherry-picking if the delta is too big

[liggitt]

Diff between where we are and master isn't that big: RangelReale/osin@1f4e975...eff0d43

Most of the changes are changes to examples or a refactor of token expiration checking