Should not return passcode token when token management is disabled

Currently, the token generation app (in fact, our own KNOXTOKEN service), returns the passcode token in the result JSON even if token management is disabled. This is wrong:
without token management, the passcode token will not be persisted -> it cannot be used for authentication.