STS GetSessionToken should support same limits as AWS - EUCA-8165

The GetSessionToken and AssumeRole actions now have the same duration
limits as AWS/STS and will fail with a ValidationError if these limits
are exceeded.

EUCA-8165