Switch to base64 encoding for state query param parsing consistency

[danperkins]

Much cleaner than keeping track of how the other auth redirects changed the query parameter encoding!