fix (customer call): mfa connect step requires/takes a 'type' now. spec updated too