fix: make sure authorization url had state

fix: make sure authorization url had state #4380