Implement include token in APIv3 organization endpoint

Based on this code, you will only return the `token` value if the API client specifically asks for it with `include=token`. Is there a reason to not always include it in the response?