- Update MCP OAuth state expiration in connection.ts - Update OpenRouter OAuth state expiration in oauth-provider.ts - Addresses security review feedback to minimize window for potential attacks