Add optional org_id field to AppleIdentityToken

This patch was authored by @RanLearns and released by @gwynne.

Motivation and Reasoning

When working with Managed Apple IDs (schools and business) there can be a need to decode an additional field of a user's org_id when they sign in.