Update chai to ^1.10.0
Fix `loopback.getCurrentContext`

 - ensure the method is always defined

 - return `null` when the context is not active
   (we are not inside a request-handling chain)
middleware/token: store the token in current ctx