The state array should not be modified after extracting (getting) the persistent authentication data. This resolves #247.
