move to pac4j 1.4.0 release