403 Invalid state error from custom login page