Ensure clients do not send the state parameter during the code exchange step

[aaronpk]

A common mistake in the OAuth flow is the client sending the state parameter along with the code exchange. However, the state parameter is just for the clients use, not part of actually exchanging the authorization code.

The micropub.rocks flow should warn users if the client sends the state parameter in the authorization code exchange and discourage this behavior.