[dev-logout] OIDEndSessionResponse doesn't preserve additional response params

[WilliamDenniss]

OIDEndSessionResponse accepts a list of parameters, but discards all but state.

To be compatible with AppAuth's extensible design, additional response parameters should be retained.

[WilliamDenniss]

This is fixed in dev-logout.