a whole lot of error handling is missing

[webmandman]

1. after calling redirect uri a second time, the token request will fail, one example error ""General application error: Element duo_state.state is undefined in SESSION."

[webmandman]

there are more. need to thoroughly go through all code.