Include sub-resource parameters in the string to sign
Do not add '=' if parameter has no value
Allow x-amz-security-token header when applicable