PaymentExpress: Return token in authorization

In keeping with the standard #store API this makes PaymentExpress return
the token in the Response#authorization field. The custom Response#token
method has been left in place for backwards compatibility.