Set min length for state variable

[gjblajian]

You should allow the client to set the minimum length for the state parameter as defined here: https://docs.advancedrestclient.com/using-arc/sending-requests/authorizing-a-request#oauth-2. Ory Hydra does not allow any less than a length of 8 and you are generating a state of length 5 [and it cannot be modified].