fix the bug where hitting software secure callback URL second time  would revert the state back to 'ready to start' from 'started'