middleware/token: store the token in current ctx

A follow-up PR for #337.

See also the discussion in https://github.com/strongloop/loopback/issues/569 

/to @raymondfeng please review
/cc @ritch