I had a similar issue last week, and tracked it down to the state field being overwritten by multiple calls to getLoginUrl() . Each time you call getLoginUrl() a new state token is generated in the SDK and stored in the $_SESSION (it's just a random value), so if you call it twice and the user uses the first link to log in, the second call will have reset the SDK's internal state token, and you will get this error in your logs.
Well, I've encountered this exact problem once, and I had a problem with the state & code parameters in the URL - my . Htaccess file was not forwarding them.
I cant really gove you an answer,but what I can give you is a way to a solution, that is you have to find the anglde that you relate to or peaks your interest. A good paper is one that people get drawn into because it reaches them ln some way.As for me WW11 to me, I think of the holocaust and the effect it had on the survivors, their families and those who stood by and did nothing until it was too late.