Invalid token, state does not match

Damn, this is a mind twister. This time it wasn’t because of https, but because of the www. So you start at https://stillproud.com and end at https://www.stillproud.com. So again, you’re not getting the same localStorage. The base URL you start and end the authentication at has to be identical. No difference in http/https or subdomains, or your auth will fail.

The way to solve it would be to have your web server force a redirect to one version, whether that’s with or without www is more of a marketing choice than a technical choice.