fixed return type of mfaAuthStep