migrate to auth-flows release 1.6.0-RELEASE