"Grant access" but then state token missing?

### ⚠️ Before posting ⚠️

- [x] This is a **bug**, not a question or an enhancement.
- [x] I've [searched for similar issues](https://github.com/nextcloud/android/issues) and didn't find a duplicate.
- [x] I've written a clear and descriptive title for this issue, not just "Bug" or "Crash".
- [x] I agree to follow Nextcloud's [Code of Conduct](https://nextcloud.com/contribute/code-of-conduct/).

### Steps to reproduce

1. Install Nextcloud Android client (recent version)
2. Enter public server URL, e.g. https://cloud.some-company.foo
3. Enter Login and password
4. Tab on "Login"
5. Screen with "Grant access" appears, tab on it
6. Now message "Access forbidden, state token missing" appears

We tried this all over again.

### Expected behaviour

The user can login again.

### Actual behaviour

"Access denied, state token missing" appears.

### Android version

10

### Device brand and model

Huawei STK-L1

### Stock or custom OS?

Stock

### Nextcloud android app version

31.0.6.2

### Nextcloud server version

31.0.6

### Using a reverse proxy?

No

### Android logs

_No response_

### Server error logs

```bash

```

### Additional information

audit.log
```
{"reqId":"aG0mjh4GQ8TTLjRoQmHCDQAAAAk","level":1,"time":"2025-07-08T16:09:18+02:00","remoteAddr":"1.2.3.4","user":"--","app":"admin_audit","method":"POST","url":"/login","message":"Login attempt: \"foo\"","userAgent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36","version":"31.0.6.2","data":{"app":"admin_audit"}}
{"reqId":"aG0mjh4GQ8TTLjRoQmHCDQAAAAk","level":1,"time":"2025-07-08T16:09:19+02:00","remoteAddr":"1.2.3.4","user":"foo","app":"admin_audit","method":"POST","url":"/login","message":"Login successful: \"foo\"","userAgent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36","version":"31.0.6.2","data":{"app":"admin_audit"}}
{"reqId":"aG0mlELXXowrrTsfgZjjcQAAAA0","level":1,"time":"2025-07-08T16:09:24+02:00","remoteAddr":"1.2.3.4","user":"foo","app":"admin_audit","method":"GET","url":"/apps/encryption/ajax/getStatus","message":"Logout occurred","userAgent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36","version":"31.0.6.2","data":{"app":"admin_audit"}}
{"reqId":"aG0mv1JplZHw1N52y_8wKAAAAAE","level":1,"time":"2025-07-08T16:10:08+02:00","remoteAddr":"1.2.3.4","user":"--","app":"admin_audit","method":"POST","url":"/login","message":"Login attempt: \"foo\"","userAgent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36","version":"31.0.6.2","data":{"app":"admin_audit"}}
{"reqId":"aG0mv1JplZHw1N52y_8wKAAAAAE","level":1,"time":"2025-07-08T16:10:09+02:00","remoteAddr":"1.2.3.4","user":"foo","app":"admin_audit","method":"POST","url":"/login","message":"Login successful: \"foo\"","userAgent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36","version":"31.0.6.2","data":{"app":"admin_audit"}}
{"reqId":"aG0mx1xcgVZz9sCYSiNYWgAAAAQ","level":1,"time":"2025-07-08T16:10:15+02:00","remoteAddr":"1.2.3.4","user":"foo","app":"admin_audit","method":"GET","url":"/apps/encryption/ajax/getStatus","message":"Logout occurred","userAgent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36","version":"31.0.6.2","data":{"app":"admin_audit"}}
```