code: func validateStateToken(c context.Context, stateTok string) (map[string]string, error) {
  	return openIDStateToken.Validate(c, stateTok, nil)
  }
docs: // validateStateToken validates 'state' token passed to redirect_uri. Returns
  // whatever `state` was passed to authenticationURI.