Add :token to order_attributes.

This is an allowed attribute in 2-0-stable, but not when using the hub
connector.