* pass state for clients * use redirect connector to set cookie with translations * simplify duo redirect url validation