Comments in examples mention csrf_state which does not exist in the code #208
Description
https://docs.rs/oauth2/4.3.0/oauth2/index.html#example-synchronous-blocking-api
// Once the user has been redirected to the redirect URL, you'll have access to the // authorization code. For security reasons, your code should verify that the `state` // parameter returned by the server matches `csrf_state`. Presumably this is meant to refer to csrf_token which is set in the code above that comment?
The same issue occurs several times in later examples.