handle_callback function

Handle OAuth 2.0 callback: verify state, swap code for token, verify token