Authentication API random "invalid_state" on mobile

@konrad.sopala thanks for spending time on this and sorry for the cross posting. Things were not moving and I was trying to understand as much as possible on our part on the state parameter flow.