State parameter and user redirection

Nice answer! Thank you for taking the time to answer each question and to explain the HTTP-Only cookie alternative.