upgrade Microsoft.Owin.Security package to 2.1.0